cloudformation-waf-acl

cloudformation-waf-acl 一个用于预置和管理 AWS WAFv2 资源的 AWS CloudFormation 模板，包括 Web ACL、托管规则组、自定义正则表达式模式集和 IP 集。 组件 该模板预置以下资源： 1. 一个 AWS::WAFv2::WebACL。 2. AWS 托管防护规则组： AWSManagedRulesCommonRuleSet AWSManagedRulesKnownBadInputsRuleSet AWSManagedRulesAmazonIpReputationList AWSManagedRulesAnonymousIpList...

SyntheticSun

SyntheticSun SyntheticSun 是一个深度防御安全自动化与监控框架，它利用威胁情报、机器学习、托管的 AWS 安全服务以及无服务器技术，持续预防、检测和响应威胁。 你睡在碎玻璃中 映着你的倒影， 但你是否感到鲜活？ 是啊，让我问你， 你是否感到鲜活？ - Norma Jean, 2016 概述 使用基于事件和时间的无服务器自动化（例如 AWS CodeBuild、AWS Lambda）来收集、标准化、丰富和关联 Kibana 中的安全遥测数据 利用威胁情报、地理位置数据、开源情报、基于机器学习的异常检测以及 AWS API，进一步丰富安全遥测数据并识别潜在威胁...

aws-log4j-mitigations

aws-log4j-mitigations Mitigaciones a implementar en AWS para intentar prevenir la explotación de log4j. Usando WAFv2 con Ansible. Inspirado por: https://github.com/OllieJC/aws-log4j-mitigations...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, crossplane-provider-aws-athena-fips, crossplane-provider-aws-sesv2-fips, terraform-provider-azapi, chainloop-control-plane-fips, crossplane-provider-aws-s3-fips, packer, crossplane-provider-aws-sesv2, crossplane-provider-azure-spring,...

SyntheticSun - A Defense-In-Depth Security Automation And Monitoring Framework Which Utilizes Threat Intelligence, Machine Learning, Managed AWS Security Services And, Serverless Technologies To Continuously Prevent, Detect And Respond To Threats

SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats. You sleep in fragmented glass With reflections o...