Popular repositories Loading

1. palo-alto-security-audit palo-alto-security-audit Public

   Python script that audits Palo Alto NGFW firewall rules and flags risky configurations — unused rules, overly permissive policies, and missing security profiles.

2. detection-as-code detection-as-code Public

3. cloud-security-lab cloud-security-lab Public

4. identity-threat-detection identity-threat-detection Public

   Splunk SPL detections for identity-based threats. Azure AD, Entra ID, Active Directory. MITRE ATT&CK mapped.

5. identity-detection-pipeline identity-detection-pipeline Public

   End-to-end identity threat detection pipeline: Azure AD log ingestion, Splunk SIEM detections, IR playbooks, and attack simulation. MITRE ATT&CK mapped.