
ndaal_public_auditd
Best-practice Linux Auditd rule set with 14,956 MITRE ATT&CK-mapped rules, Ansible deployment role, and lint/test tooling for security monitoring and…

Best-practice Linux Auditd rule set with 14,956 MITRE ATT&CK-mapped rules, Ansible deployment role, and lint/test tooling for security monitoring and…

AI agent set for cloud security purple teaming, runs inside Claude Code, Gemini CLI, and Codex.

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

iOS Airborne vulnerabilities log artifact extractor from LogArchive CVE-2025-24252

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

Best Practice Auditd Configuration

PowerShell-based scanner to detect Log4j CVE-2021-44228 vulnerability by searching directories and log files for exploitation indicators.

Trace every shell environment variable to its exact file and line origin. Audit shell configs for dead entries, duplicates, and orphaned files across…

Blue Team detection lab created with Terraform and Ansible in Azure.

Corelight Dashboards and Parsers for Sentinel One Singularity