macOS_security_audit

🔒 macOS-Sicherheitsaudit Ein auf Bash basierendes Sicherheits-Audit-Toolkit für macOS, das die Härtungseinstellungen des Systems anhand der CIS-Benchmark-Empfehlungen überprüft und JSON/HTML-Berichte erzeugt. Erstellt von Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl Übersicht Dieses...

AMDH

AMDH Android Mobile Device Hardening scritto con python3. Versione Android, PObY-A Privacy Owned by You - Android, con scansioni di malware e impostazioni, è disponibile sul Play Store e il codice sorgente si trova QUI Motivazioni AMDH è stato creato per aiutare a automatizzare la scansione delle...

Zeus

Zeus Strumento di audit e hardening AWS Zeus è un potente strumento per le migliori pratiche di hardening per AWS EC2 / S3 / CloudTrail / CloudWatch / KMS. Controlla le impostazioni di sicurezza in base ai profili creati dall'utente e le modifica secondo le impostazioni consigliate basate sul CIS...

JShielder

JShielder JShielder — автоматизированный скрипт для усиления защиты Linux-серверов JSHielder — это открытый Bash-скрипт, разработанный для помощи системным администраторам и разработчикам в защите их Linux-серверов, на которых они будут развертывать веб-приложения или службы. Этот инструмент...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Registro de Módulos do Terraform Um módulo do Terraform para configurar sua conta AWS com uma linha de base de configuração razoavelmente segura. A maioria das configurações é baseada no CIS Amazon Web Services Foundations v1.4.0 e no AWS Foundational Security Best...

cis-vsphere

🦍 CIS vSphere Uno strumento per valutare la conformità di un ambiente VMware vSphere rispetto al CIS Benchmark per VMware vSphere. Requisiti VMware PowerCLI 12.0.0 o superiore VMware vSphere 7.0 Accesso in lettura al vCenter o all'host ESXi Utilizzo 1. Clona il repository e naviga nella cartella:...

docker-bench-security

Docker Bench per la Sicurezza Docker Bench per la Sicurezza è uno script che controlla decine di buone pratiche comuni relative al deployment di container Docker in produzione. I test sono tutti automatizzati e si basano sul CIS Docker Benchmark v1.6.0. Lo rendiamo disponibile come utilità...

kube-beacon

Progetto Kube-Beacon Scansiona il tuo runtime Kubernetes!! Kube-Beacon è uno scanner di audit open source che esegue controlli di audit su un cluster Kubernetes distribuito e produce un report di sicurezza. I test di audit sono l'implementazione completa della...

linux-security-audit

Strumento di Audit di Sicurezza per Linux Strumento di Audit di Sicurezza per Linux basato sul CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 Se lo trovi utile, per favore lascia una "stellina" 🌟 per supportare ulteriori miglioramenti. Indice dei Contenuti 1. Funzionalità 2. Anteprima 3. Log...

chain-bench

📖 Dokumentation Chain-bench ist ein Open-Source-Tool zur Überprüfung Ihres Software-Lieferketten-Stacks auf Sicherheits-Compliance basierend auf einem neuen CIS Software Supply Chain Benchmark. Die Prüfung konzentriert sich auf den gesamten SDLC-Prozess, bei dem Risiken von der Code- bis zur...

auditpolCIS

auditpolCIS CIS Benchmark-Tests der Windows SIEM-Konfiguration Dies ist eine Anwendung zum Testen der Konfiguration von Windows-Überwachungsrichtlinieneinstellungen gemäß den CIS-Benchmark-Empfehlungen. Einige Punkte: Das getestete System war Windows Server 2019, und der verwendete Benchmark war...

kube-bench

kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...

Wynis

Wynis Apenas um script do PowerShell para auditoria de segurança com as MELHORES Práticas no ambiente Windows Você só precisa executar o script, ele criará um diretório chamado: AUDITCONF%MACHINENAME%DATE% Atualmente, os scripts são: -WynisWIN2016DC-CISv1.0 : Auditoria do DC 2016 com CIS -Wynis-A...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

auditpolCIS - CIS Benchmark Testing Of Windows SIEM Configuration

CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: The tested system was Windows Server 2019, and the benchmark used was also Windows Server 2019. T...

Year in Review: Rapid7 Vulnerability Management

2022 began on a solemn note — many organizations across the globe were recovering from the Log4Shell zero-day vulnerability. For the InsightVM and Nexpose team, 2022 began with a lot of introspection on how we can add more value and keep meeting our customer needs in the best possible ways. This...

Moderate: Red Hat Security Advisory: ACS 3.71 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security. The updated image includes bug fixes and feature improvements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

Knowing your shared security responsibility in Microsoft Azure and avoiding misconfigurations

Trend Micro is excited to launch new Trend Micro Cloud One – Conformity capabilities that will strengthen protection for Azure resources. As with any launch, there is a lot of new information, so we decided to sit down with one of the founders of Conformity, Mike Rahmati. Mike is a technologist a...

Policy Compliance Library Updates, May 2020

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...