How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.
This project is a multi-cloud security auditor and configuration audit tool designed to identify misconfigurations and vulnerabilities across various cloud service provider environments. It functions as a cloud security posture management tool and a vulnerability remediation engine, allowing users to scan resources against security best practices and industry compliance standards. The system distinguishes itself by combining detection with a remediation engine that executes corrective actions to fix discovered security gaps. It employs a plugin-based audit engine and a provider-agnostic abstr
Open source demos, concept and guidance related to the AWS CIS Foundation framework.
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
The main features of duo-labs/cloudtracker are: Cloud Security, Security Assessment Tools.
Open-source alternatives to duo-labs/cloudtracker include: cloudsploit/scans — This project is a multi-cloud security auditor and configuration audit tool designed to identify misconfigurations and… cyberark/skywrapper — SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS. awslabs/aws-security-benchmark — Open source demos, concept and guidance related to the AWS CIS Foundation framework. cisagov/sparrow — Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications… cyberark/skyark — SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS. darkbitio/aws-recon — Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.