15 open-source projects similar to endgameinc/aws-logsearch, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
Proof of concept incident response demo using SSM and AWS Fargate.
A Lambda-powered Security Orchestration framework for AWS GuardDuty
Collection of scripts and resources for DevSecOps and Automated Incident Response Security
This project sets up partitioned Athena tables for your CloudTrail logs and updates the partitions nightly. As new AWS accounts begin sending you logs or new AWS regions come online, your paritions will always be up-to-date. It is based on work by Alex Smolen in his post Partitioning CloudTrail…
Investigation of API activity using Athena and notification of actions using EventBridge
Varna: Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL)
Python library to carry out DFIR analysis on the Cloud
Show the history and changes between configuration versions of AWS resources
A python module for orchestrating content acquisitions and analysis via amazon ssm.
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Built-in Panther detection rules and policies
Open source application to instantly remediate common security issues through the use of AWS Config
Scripts to quickly fix security and compliance issues