content-packs

Content Packs for Eventum Ready-to-use generator projects for Eventum that produce realistic synthetic events mimicking real SIEM data sources. Each generator outputs ECS-compatible JSON that can be ingested directly into Elasticsearch, OpenSearch, or any SIEM platform. Quick Start With Docker...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

ecs-templates

개요 이 저장소에는 Corelight 또는 Zeek 로그를 Elastic Common SchemaECS 명명 표준으로 변환하고 Elastic Stack 배포 환경에 저장하는 데 필요한 모든 것이 포함되어 있습니다. 2019년, Elastic Common Schema와 같은 해에 처음 출시된 이 저장소는 현재까지도 활발히 유지 관리되고 업데이트되고 있습니다. 200개 이상의 다양한 로그와 메트릭을 지원하며, 모든 환경을 지원하면서도 각 고유 환경에 맞게 필요하고 원하는 옵션을 동시에 사용자 정의할 수 있도록 설계되었습니다. 모든...

ecs-logstash-mappings

Corelight ECS Logstash 파이프라인 이 저장소는 다음 저장소의 설치 스크립트와 함께 사용해야 하는 Logstash 파이프라인 파일로 구성되어 있습니다. https://github.com/corelight/ecs-templates 해당 저장소의 설치 프로그램은 이 저장소에서 파일을 다운로드하므로, 이 저장소를 직접 사용할 필요도 없고 권장되지도 않습니다. 라이선스 파일과 자동화 스크립트는 BSD 라이선스에 따라 오픈소스로 제공됩니다. 자세한 내용은 COPYING을 참조하세요. Github 저장소 정의...

ecs-mapping

Corelight ECS Ingest 파이프라인 이 저장소는 다음 저장소의 설치 스크립트와 함께 사용해야 하는 Ingest 파이프라인 파일로 구성되어 있습니다. https://github.com/corelight/ecs-templates 해당 저장소의 설치 스크립트는 이 저장소에서 파일을 다운로드하므로, 이 저장소를 직접 사용할 필요가 없으며 권장되지도 않습니다. 라이선스 파일과 자동화 스크립트는 BSD 라이선스에 따라 오픈소스로 제공됩니다. 자세한 내용은 COPYING을 참조하세요. GitHub 저장소 정의...

cpra

Continuous Pulse and Recovery Agent Checks services, sends alerts, and runs the recovery actions you configure. CPRa is a self-hosted monitoring and recovery agent written in Go. It runs health checks against your services on a schedule, opens and closes incidents against configurable thresholds,...

siphondns

SiphonDNS この研究で説明されている技術のPoCです。 DNSの非標準セクションを介したデータ外部送信（exfiltration）を実装します。 サーバー: $ ./siphondns-server -method ecs Starting DNS server cmd id Command received Receiving data............................................................................ Response: uid=1000kali gid=1000kali...

CVE20264893poc

Topology: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps​ 1.vi /etc/dnsmasq.conf​ port=5353​ listen-address=xxx.xxx.xxx.x bind-interfaces​ no-resolv​ no-hosts​ no-poll​ cache-size=1000​ log-queries​ log-facility=-​...

OPENSUSE-SU-2026:11914-1 amazon-ecs-init-1.107.0-1.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: docker-fips, buildkitd-fips, trivy-operator, spegel-fips, envoy-gateway, packer, helm-exporter-fips, docker, redpanda-operator, chainctl, nerdctl, scorecard, spegel, kube-arangodb-fips, kubescape-operator-fips, grype-db, harvester, tigera-operator-fips, kube-mgmt,...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: docker-fips, buildkitd-fips, trivy-operator, spegel-fips, envoy-gateway, packer, helm-exporter-fips, docker, redpanda-operator, chainctl, nerdctl, scorecard, spegel, kube-arangodb-fips, kubescape-operator-fips, grype-db, harvester, tigera-operator-fips, kube-mgmt,...

CVE-2026-26947

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-26947

Dell ECS (versions 3.8.1.0 through 3.8.1.7) and Dell ObjectScale (versions prior to 4.4.0.0) contain an Improper Privilege Management vulnerability. A high-privileged attacker with local access can exploit this to achieve elevation of privileges , with full impact on confidentiality, integrity, a...

EUVD-2026-80833

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-26947

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-26947

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2025-210917

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-36591

Dell ECS (versions 3.8.1.0 through 3.8.1.7) and Dell ObjectScale (versions prior to 4.4.0.0) contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high-privileged attacker with local access could potentially exploit this flaw, leading to information exposure . The assigned C...