ThreatMapper

ThreatMapper - 云原生的运行时威胁管理与攻击路径枚举 !注意 本项目由 https://threatmapper.org 维护 Deepfence ThreatMapper 在你的生产平台中搜寻威胁，并根据其利用风险对这些威胁进行排名。它能发现脆弱的软件组件、暴露的密钥以及偏离良好安全实践的行为。ThreatMapper 结合基于代理的检测与无代理监控，提供最广泛的覆盖范围以检测威胁。 借助 ThreatMapper 的 ThreatGraph 可视化功能，你可以识别出对应用程序安全构成最大风险的问题，并优先安排计划内的防护或修复措施。 在产品文档中了解更多关于...

SecretScanner

SecretScanner SecretScanner Deepfence SecretScanner 可以在容器镜像或文件系统中发现未受保护的安全凭据。 SecretScanner 是一个独立工具，它检索并搜索容器和主机的文件系统，将内容与约 140 种凭据类型的数据库进行匹配。 SecretScanner 也集成在 ThreatMapper 中，这是一个开源扫描器，可识别云原生应用中的易受攻击依赖项和未受保护的凭据，并根据利用风险对这些漏洞进行排序（示例） 什么是安全凭据？ 安全凭据是任何类型的敏感或私有数据，它们授权授权用户访问关键 IT...

PacketStreamer - Distributed Tcpdump For Cloud Native Environments

Deepfence PacketStreamer is a high-performance remote packet capture and collection tool. It is used by Deepfence's ThreatStryker security observability platform to gather network traffic on demand from cloud workloads for forensic analysis. Primary design goals: Stay light, capture and stream, n...

ThreatMapper - Identify Vulnerabilities In Running Containers, Images, Hosts And Repositories

The Deepfence Runtime Threat Mapper is a subset of the Deepfence cloud native workload protection platform, released as a community edition. This community edition empowers the users with following features: 1. Visualization: Visualize kubernetes clusters, virtual machines, containers and images,...

SecretScanner - Find Secrets And Passwords In Container Images And File Systems

Deepfence SecretScanner can find any potential secrets in container images or file systems. What are Secrets? Secrets are any kind of sensitive or private data which gives authorized users permission to access critical IT infrastructure such as accounts, devices, network, cloud based services,...