MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management.

Rules for Elastic Security's detection engine

Open source cloud-native security lake platform (SIEM alternative) for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS 🦀

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

MAL-CL (Malicious Command-Line)

A new C++ vectorized database acceleration library aimed to optimizing query engines and data processing systems.

Distributed Big Data Orchestration Service

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

Multi-Cloud Security Auditing Tool

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

AWS IAM linting library

Materials for AWS Training

A tool for quickly evaluating IAM permissions in AWS.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

A large collection of system log datasets for AI-powered log analytics

Fast key-value DB in Go.

Fast, Distributed Graph DB

A repository for using osquery for incident detection and response

The MongoDB Database

💻 CS446: Machine Learning in Spring 2018, UIUC

💻 a list of applications, alfred workflows and various tools that make my macOS experience even more amazing

The simple, stupid rules engine for Java