Collection of scripts and resources for DevSecOps and Automated Incident Response Security
This project sets up partitioned Athena tables for your CloudTrail logs and updates the partitions nightly. As new AWS accounts begin sending you logs or new AWS regions come online, your paritions will always be up-to-date. It is based on work by Alex Smolen in his post Partitioning CloudTrail…
A Lambda-powered Security Orchestration framework for AWS GuardDuty
Proof of concept incident response demo using SSM and AWS Fargate.
The main features of andrewkrug/fargate-ir are: Incident Response Tools.
Open-source alternatives to andrewkrug/fargate-ir include: awslabs/aws-security-automation — Collection of scripts and resources for DevSecOps and Automated Incident Response Security. damienjburks/datacop — Protect your data in AWS S3 with DataCop! duo-labs/cloudtrail-partitioner — This project sets up partitioned Athena tables for your CloudTrail logs and updates the partitions nightly. As new AWS… easttimor/aws-incident-response — Investigation of API activity using Athena and notification of actions using EventBridge. endgameinc/aws-logsearch — Search AWS CloudWatch logs all at once on the command line. This uses the aws sdk-for-go. See Configuring Credentials… ansorren/gdpatrol — A Lambda-powered Security Orchestration framework for AWS GuardDuty.