Adan Álvarez

TrailDiscover. An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications

AWS-malware-lab. Creation of a laboratory for malware analysis in AWS

HoneyTrail. Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. It utilizes a dedicated CloudTrail for precise detection and notification specifically for honeyservices activity.

TrailAlerts. TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events in AWS.

SimpleAutoBurp. Python script to launch burp scans automatically

owasp-wstg-tracker. Simple web app to track OWASP WSTG security testing progress

bedrock-secure-questionnaire-automation. Infrastructure-as-code for a serverless knowledge base using Amazon Bedrock, Aurora PostgreSQL (with pgvector), Lambda, and S3. This setup ingests domain-specific data into a Bedrock Knowledge Base for retrieval-augmented generation (RAG) and handles automated question answering.

TrailGuard. Tool to check the CloudTrail configuration and the services where trails are sent, to detect potential attacks to CloudTrail logging.

AWS-Attack-Scenarios. A collection of real-world scenarios and code samples demonstrating potential exploitation techniques in AWS services. Designed for educational purposes and security awareness.

MyScripts. Python

semgrep-llm-advisor. Integrates Semgrep static analysis with AI-powered recommendations to enhance code security and automate remediation.

AWSIncidentResponseAutomations. Easy to deploy automations for incident response in AWS

exploit-consul. Script to obtain a reverse shell from consul agent

CTF. Solutions to CTF challenges

openai-security-review. Let OpenAI comment on your PR with security recommendations.

GuardDutyInsightfulAlerts. GuardDutyInsightfulAlerts: A Lambda-based system that processes AWS GuardDuty events, enriches them with detailed information, and delivers formatted email notifications for efficient incident analysis and response.

HoneyPy. A low interaction honeypot.

Postfix-Server-Setup. Shell

terraform-sandbox. Terraform sandbox for experimenting with infra scenarios

terraform-aws-trailalerts. Terrafom module for TrailAlerts serverless cloud-detection tool

cloud-ranges. Synthetic cloud environments for testing AI agent behavior on real attack chains.

known_aws_accounts. List of known AWS accounts