Popular repositories Loading

1. controlzee controlzee Public

   Incident response as code for AWS. Feed it CloudTrail logs and IOCs; it traces everything the attacker did, including roles they assumed and resources they created, flags what was exposed and where…

   Python 1

2. SIAC SIAC Public

   Forked from CityBaseInc/SIAC

   SIAC is an enterprise SIEM built on open-source technology.

3. MCPThreat MCPThreat Public

   Threat modeling tool for MCP servers

   TypeScript

4. detection-workbench detection-workbench Public

   An MCP server that lets Claude write, test, explain, and tune Snort 3 detections against packet captures offline, proving every change with real engine runs.

   Python

5. tracewatch tracewatch Public

   Experiment: a Linux flight recorder for a launched process (Tracee eBPF + mitmproxy) with an interactive HTML report

   Python