4n6ir

All

7 repositories

velociraptor
Public
Digging Deeper.... Research and Development Cloud Deployment
aws cdk edr velociraptor
Python
•
Apache License 2.0
•0•2•0•0•Updated Oct 24, 2025Oct 24, 2025
cloudcruft
Public
Cloudcruft captures DNS, IPv4, and IPv6 atomic indicators from Open-Source Intelligence (OSINT) Threat Feeds, storing them in Apache Parquet files for investigations into the past.
python docker cloud intel saas threat feed cdk
Python
•
Apache License 2.0
•0•1•0•0•Updated Apr 28, 2025Apr 28, 2025
flume
Public
Ship Webhook logs to an S3 bucket with an API Gateway broker.
python aws json lambda cloudformation gzip webhook secret s3 logs
Python
•
Apache License 2.0
•0•0•0•0•Updated Mar 24, 2025Mar 24, 2025
gifnoc
Public
Split AWS Config logs so they do not truncate during security monitoring.
config python aws lambda queue amazon s3 logs sqs bucket
Python
•
Apache License 2.0
•0•0•0•0•Updated Mar 2, 2025Mar 2, 2025
getpublicip
Public
Capture the Public IP Address during Lambda execution for CloudTrail correlation.
docker aws lambda extension aws-lambda serverless container ip layer cdk
Python
•
Apache License 2.0
•0•3•0•0•Updated Nov 24, 2024Nov 24, 2024
siphon
Public archive
Eliminating entry barriers for adding network security monitoring to AWS using Zeek and Suricata with S3 storage.
docker aws pcap mirror vpc suricata zeek cdk
Python
•
Apache License 2.0
•0•1•0•0•Updated Mar 22, 2023Mar 22, 2023
demystify
Public archive
Demystifying IAM Star Permissions
docker aws chatbot iam cdk
Python
•
Apache License 2.0
•0•0•0•0•Updated Mar 22, 2023Mar 22, 2023