fabacab / awesome-cybersecurity-blueteam Goto Github PK

Big up

I don't know why you had to introduce BLM or defundthepolice into this, it's an awesome list not your local liberal board. Why are you like this?

Super minor issue in the TOC, line 38:

- [Identity and AuthN/AuthZ)](#identity-and-authnauthz)

There is an unmatched closing parenthesis ) at the end of the AuthZ title. Correct to:

- [Identity and AuthN/AuthZ](#identity-and-authnauthz)

Great work on the list, really enjoying reading through so far!

Hi!

Wouldn't it be nice if there was a section dedicated to Active Directory (AD)?
Maybe place it under windows, or make it a subsection :)

Why? So we can split Windows desktop tools and AD. For instance, Ping Castle is currently listed on Windows section, however that tool is mostly used to get intel about the AD environment.
I wonder what other tools there are to protect AD environments, for free or premium prices.

Thanks for the great list! May I suggest adding a new Hardware section to defend against physical attacks (eg theft of a machine with encrypted data) that powers-off the machine or triggers wipe of encryption keys?

Here's two open-source hardware projects for tripwires/dead-man-switches

1. BusKill
2. Day Tripper

The following guide describes how BusKill can be configured to wipe the LUKS Header (containing the FDE key) and its metadata. It shows a video demo where the machine wiped the keys & powered-off in <6 seconds, and it includes a post-execution forensic analysis in Kali with bulk_extractor

• https://www.buskill.in/luks-self-destruct/