trimstray / the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

linux linux-hardening linux-security security hardening audit guide manual checklist cis pci-dss openscap redhat-enterprise-linux centos

Updated Apr 12, 2019

CISOfy / lynis

5.9k

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27…

Good first issues

Gather info on expired passwords and locked accounts

good first issue help wanted

#474 opened over 1 year ago by sigio

3

Shell Updated Apr 29, 2019

ossec / ossec-hids

2.6k

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, po…

hids security pci-dss nist800-53 ossec compliance intrusion-detection fim loganalyzer policy-monitoring file-integrity-management

Good first issues

Build fails because of missing pcre2-10.32

documentation bug

#1663 opened 3 months ago by bcapptain

20

C Updated Apr 30, 2019

wazuh / wazuh

896

Wazuh - Host and endpoint security

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

C Updated May 3, 2019

ComplianceAsCode / content

653

Security compliance content in SCAP, Bash, Ansible, and other formats

Good first issues

Beginners Starting Point?

documentation

#4272 opened 24 days ago by kclinden

9

Developer Guide doesn't fully reflect the latest structural changes

documentation Text

#3246 opened 8 months ago by jan-cerny

1

Python Updated May 3, 2019

wazuh / wazuh-ruleset

188

Wazuh - Ruleset

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

Python Updated May 3, 2019

wazuh / wazuh-kibana-app

89

Wazuh - Kibana plugin

JavaScript Updated May 3, 2019

wazuh / wazuh-docker

88

Wazuh - Docker containers

wazuh docker ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening log-analysis ids pci-dss file-integrity-management security-awareness vulnerability-detection incident-response

Shell Updated May 3, 2019

citybasebrooks / SIAC

51

SIAC is an enterprise SIEM built on open-source technology.

siem security elk osquery intrusion-detection secdevops pci-dss fim compliance wazuh incident-response aws

Updated Oct 31, 2018

wazuh / wazuh-documentation

48

Wazuh - Project documentation

wazuh documentation reference ossec openscap elasticsearch monitoring security security-hardening pci-dss file-integrity-management compliance security-awareness log-analysis fim loganalyzer intrusion-detection vulnerability-detection incident-response

Python Updated May 3, 2019

wazuh / wazuh-ansible

37

Wazuh - Ansible playbook

wazuh ansible ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

Python Updated May 3, 2019

wazuh / wazuh-api

37

Wazuh - RESTful API

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

JavaScript Updated May 3, 2019

AvyanConsultingCorp / pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

33

Azure PCI PaaS Reference Architecture

reference-architecture azure compliance pci-dss pci azure-paas gartner paas infrastructure reference-architecture-diagram decision-maker azure-governance governance cloud security azure-security microsoft

HTML Updated Dec 14, 2017

Azure / pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

25

Azure Security and Compliance Blueprint - automation pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

azure pci-dss

PowerShell Updated Jul 18, 2018

Atomicorp / openvas-docker

20

A docker container for openvas

openvas scanner docker security fips-140-2 pci-dss nist800-53 gdpr

TeX Updated Jul 24, 2018

Microsoft / MCW-Modern-cloud-apps

16

MCW Modern cloud apps

mcw azure app-service vsts aad app-insights pci-dss sql-database data-factory sql-data-warehouse logic-apps api-management on-premises

Updated May 2, 2019

wazuh / wazuh-splunk

16

Wazuh - Splunk app

wazuh ossec security loganalyzer compliance monitoring policy-monitoring splunk openscap security-hardening intrusion-detection ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection gdpr

JavaScript Updated May 3, 2019

wazuh / wazuh-packages

13

Wazuh - Tools for packages creation

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

Shell Updated May 3, 2019

Microsoft / MCW-Securing-PaaS

12

MCW Securing PaaS

mcw paas app-service-environment azure-key-vault azure-security-center cosmos-db cosmosdb pci-dss aad-b2c web-app api-apps sql-database vnet rbac azure-search nsg

C# Updated Apr 23, 2019

gjyoung1974 / kolide-fleet-chart

9

kolide-fleet-chart Chart for Kubernetes includes kolide-fleet, MySQL Database and Redis cache

security instrumentation host-instrumentation infosec threat-intelligence threat-hunting operations-research compliance compliance-as-code pci-dss indicators-of-compromise operations-management

Smarty Updated Mar 4, 2019

wazuh / wazuh-cloudformation

8

Wazuh - Amazon AWS Cloudformation

security elasticsearch incident-response wazuh ossec log-analysis monitoring policy-monitoring openscap security-hardening pci-dss ids file-integrity-monitoring security-awareness vulnerability-detection

Shell Updated May 3, 2019

wazuh / wazuh-puppet

7

Wazuh - Puppet module

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response puppet

Puppet Updated May 3, 2019

Atomicorp / nginx-waf-docker

7

docker modsecurity reverse proxy WAF based on nginx

nginx waf modsecurity modsecurity-nginx libmodsecurity docker docker-image security proxy pci-dss nist800-53 gdpr intrusion-detection intrusion-prevention virtual-patching

Shell Updated Mar 13, 2018

wazuh / wazuh-chef

6

Wazuh - Chef cookbooks

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response chef

Ruby Updated May 3, 2019

Mondido / net-sdk

4

Mondido Payments SDK for .NET

csharp dotnet mono nuget payments betalningar e-commerce pci-dss

C# Updated Jul 24, 2018

captbrando / PCIFunding

4

pci-dss

HTML Updated Jul 18, 2018

Atomicorp / ossec-docker

4

Official OSSEC docker container

ossec-docker ossec ossec-server intrusion-detection loganalyzer file-integrity-management pci-dss gdpr nist800-53 compliance monitoring docker-container docker vulnerability-detection

Shell Updated Apr 20, 2019

Centurix / Pantastic

3

Credit Card PAN scanner.

visa mastercard amex pan scanner credit-card creditcard pci pci-dss

Python Updated Mar 17, 2017

processout / processout.js

3

ProcessOut JavaScript library with modal & white-label support

library frontend pci-dss

TypeScript Updated May 2, 2019

serverfarmer / compliance

2

Tools related to Server Farmer compliance with GDPR, PCI DSS, HIPAA and/or other regulations.

pci-dss hipaa gdpr compliance linux security server-management

Shell Updated Jul 7, 2018

pci-dss

Repositories 45

Good first issues

Good first issues

Good first issues