CloudSec

by eshlomo1

37stars

11forks

1watchers

Updated 5 months ago

About

CloudSec is a comprehensive cloud security toolkit offering practical resources, scripts, and queries for offensive and defensive cloud security operations.

Welcome to the Cloud Security Toolkit repository, your all-in-one destination for cutting-edge cloud security resources! Whether you're diving into offensive strategies, mastering threat hunting, or bolstering your blue-team defenses, this repo has you covered.

Primary Use Case

This toolkit is designed for security professionals engaged in cloud threat hunting, incident response, and automation across multiple cloud platforms. It serves both red and blue teams by providing real-world tested queries, scripts, and tools to enhance cloud security posture and operational efficiency.

Key Features

Kusto Queries for threat hunting and analysis
PowerShell and Python scripts for automation and incident response
Architecture diagrams for cloud security design
AI-driven security hacking tips and best practices
Data analysis and visualization resources
Support for Microsoft Sentinel, Defender XDR, Entra ID, and Azure Security
Multi-cloud security coverage including Microsoft 365, Azure, AWS, GCP, and GWS
Links to top external repositories and cloud security sites

Installation

Clone the repository from GitHub using: git clone https://github.com/eshlomo1/CloudSec.git
Navigate to the cloned directory to access scripts and resources
Review README regularly for updates as the repository is under active development

Security Frameworks

Reconnaissance

Discovery

Collection

Detection

Response

Usage Insights

Integrate Kusto queries with SIEM tools like Microsoft Sentinel for automated threat detection and alerting.
Leverage PowerShell and Python scripts to automate incident response workflows, reducing response times.
Use architecture diagrams to design secure cloud environments proactively, minimizing attack surfaces.
Combine offensive and defensive resources for purple team exercises to improve collaboration and effectiveness.
Incorporate AI-driven hacking tips to simulate advanced adversary behaviors and enhance training scenarios.