azure-security 开源项目推荐（230 个）

tenable /terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

jassics /security-study-plan

基于渗透测试、应用安全、云安全、DevSecOps 等角色，成为成功网络安全工程师的完整实用学习计划……

4ndersonLin /awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

DataDog /stratus-red-team

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

bridgecrewio /terragoat

TerraGoat是Bridgecrew的“设计上脆弱”Terraform存储库。TerraGoat是一个学习和培训项目，展示了常见的配置错误如何进入生产云环境。

SecurityFTW /cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

appsecco /breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

HXSecurity /TerraformGoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

cado-security /cloudgrep

cloudgrep is grep for cloud storage

mikeroyal /Azure-Guide

Microsoft Azure Guide. Learn all about Microsoft Azure Tools, Services, and Certifications.

cynative /cynative

Open-source AI agent framework for security engineering across AWS, GCP, Azure, Kubernetes, GitHub & GitLab: AI-powered security review, findings triage, detection and response.

salesforce /cloud-guardrails

Rapidly apply hundreds of security controls in Azure

riskprofiler /CloudFrontier

Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.

AzureMentor /Azure-AZ-500-Study-Guide

Study Guide for the Microsoft Azure Security Technologies Exam

matro7sh /azure-mindmap

a map for the azure oriented pentests

OWASP /openshield

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

tomwechsler /Microsoft_Cloud_Security

Everything about Microsoft Cloud Security!

pwnedlabs /cloud-security-labs

Hands-on cloud security labs, vulnerable-by-design environments and challenges for AWS, Azure, GCP and Kubernetes. Maintained by Pwned Labs.

offensive-terraform /offensive-terraform.github.io

Offensive Terraform Website

lightspin-tech /lightspin-2022-top-7-attack-paths

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.