cado-security Goto Github PK

auto_ec2_lambda

AWS Lambda function to continuously, automatically capture EC2 systems into Cado Platform

awesome-fargate-ecs-eks-security-tools-and-guides

Awesome Fargate & ECS & EKS Security Tools and Guides

aws_eks_cluster_forensics

AWS EKS Cluster Forensics

cado-api-examples

Code examples for integrate with Cado API

cado-batch

A Batch script to collect forensic evidence from older Windows systems

cado-poc-eks-cluster

Easily create a simple EKS cluster for testing EKS acquisition in the Cado platform.

cado-tines-stories

Tines Stories with Cado Platform

cloudandcontainercompromisesimulator

Simulates a compromise in a cloud and container environment

cloudgrep

cloudgrep is grep for cloud storage

content

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

ctf-lambda-containers

deployment-templates

Contains a copy of the Terraform deployment templates for Cado Response

deprecated-free-tools

Old tools for the community. No longer supported by Cado Security.

dfir_resources_industroyer2

IoCs and YARA rules for Industroyer2

dfir_resources_revil_kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack

dfir_resources_whispergate

Resources for DFIR Professionals Responding to the Whispergate

docker-forensics-example-data

Malicious Docker Images from https://unit42.paloaltonetworks.com/malicious-cryptojacking-images/

engineering-career-ladder

The Engineering Career Ladder for Cado Security

gcp-setup

Scripts to aid in automating setup of GCP environment to support acquisition by Cado

guardduty-lambda-cado

Go straight from Guard Duty alerts to Automated Investigations in AWS with Cado Response

hellokitty-ransomware

Decoded HelloKitty Ransomware

kape-wannacry

An example collection of a system infected with WannaCry then collected with KAPE (Kroll Artifact Parser And Extractor)

log4shell

Content to help the community responding to the Log4j Vulnerability Log4Shell CVE-2021-44228

malwareanalysis

MalwareAnalysis

masked-ai

Masked Python SDK wrapper for OpenAI API. Use public LLM APIs securely.

product-help

Product help and user guides

rip_raw

Rip Raw is a small tool to analyse the memory of compromised Linux systems.

varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

wiper_feb_2022

Detects Wiper seen in Ukraine 23rd Feb 2022

yara-example