heimdall2
VECTR
| heimdall2 | VECTR | |
|---|---|---|
| 4 | 2 | |
| 197 | 1,282 | |
| 3.0% | 1.8% | |
| 9.9 | 3.8 | |
| 1 day ago | about 1 month ago | |
| TypeScript | ||
| GNU General Public License v3.0 or later | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
heimdall2
- CSPM opensource suggestions
-
CIS Benchmark deployment approach
Take a look at https://github.com/mitre/heimdall2 and https://github.com/mitre/saf. Data from scans and other tools can be converted to the Heimdall2 format using SAF, and SAF can use Inspec profiles to harden (https://saf.mitre.org/#/harden) and validate (https://saf.mitre.org/#/validate).
- Tooling for Purple Teaming
- Checking compliance of controls? Job help
VECTR
- Tooling for Purple Teaming
-
Security Validation Tools
I'm using VECTR which is tracking our red vs blue or purple team activities to illuminate gaps against something like the Mitre ATT&CK framework and other TTP collections.
What are some alternatives?
OSCAL - Open Security Controls Assessment Language (OSCAL)
attack-flow - Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
inspec - InSpec: Auditing and Testing Framework
attack-stix-data - STIX data representing MITRE ATT&CK
macos_security - macOS Security Compliance Project
cti - Cyber Threat Intelligence Repository expressed in STIX 2.0
saf - The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
cloudsploit - Cloud Security Posture Management (CSPM)
prowler - Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
magpie - A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.