An automated Adversary Emulation lab with terraform and MCP server. Build Caldera techniques and operations assisted with LLMs. Built for IaC stability, consistency, and speed.

MITRE ATT&CK threat actor groups imported as markdown and showing TTPs used.

Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

AWS Sagemaker Jupyter Notebooks dev environment with GPU. Build with Terraform.

An AI Playground for self-hosted LLM + GPU and several tools with terraform IaC automation. Hosted in AWS, a Private LLM inference and model hosting research playground

Private LLM inference endpoint and model hosting using Sagemaker AI. Cyber Security research testing using Cisco's foundation-sec-8b-instruct. Loads a Jupyter Notebook with security examples.

Configuration Management (CM) Security Playground. A small enterprise security lab to practice automation + CM tooling like Ansible, Chef, Puppet, SaltStack, DSCv2, DSCv3.

Samples for Caldera and Tines automation playbooks

LLM-Powered Code Security Scanning

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4

Simple AV testing

IOC Yara scan over powershell remoting using Yara.

A small security playground implementation of GHOSTS User Simulation framework with an Active Directory deployment and Elastic.

Caldera Operations Payloads