Stars
A curated list of annual cyber security reports
Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.
VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
OWASP Domain Protect - prevent subdomain takeover
A collection of postmortems. Sorry for the delay in merging PRs!
CISA's catalog of bad practices that are exceptionally risky.
A collection of online trackers, advertising networks, telemetry collectors and general 'we like to watch' lists for you to use to get better control on what they know and can see.
DevSecOps Guide, located devsecops.pagerduty.com
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
This repository contains a list of popular CNAME trackers
Browser Shortcuts for Cyber Security Related Online Services
Manage, monitor and improve your cyber security posture.
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
We borrow the concept of 'personas' from UX/service design and apply it to threat actors to improve understanding between security, technology and business teams. Created at the Open Security Summi…
🤝 Helping you find local community hubs during lockdown if you're vulnerable or shielding
Repository for the Open Information Security Risk Universe
Links to security configuration and update information for remote working and collaboration tools.
A collection of Covid-19 related threat intelligence and resources.
Cydea Ltd's privacy policy, the current version of which is available at https://cydea.com/privacy/
The Open Security Summit 2020 is focused on the collaboration between, Developers and Application Security
Generates a privacy-focussed list of tracker domains that have been identified by DuckDuckGo's Tracker Radar for use in ad blocker solutions like pi-hole.
HomeKit support for the impatient.
Data set of top third party web domains with rich metadata about them
A curated list of Awesome Threat Intelligence resources
A tool for quickly evaluating IAM permissions in AWS.