Home | Open Source @ NSA

accumulo-python3

Build Python 3 applications that integrate with Apache Accumulo

Apache NIFI

Automates the flow of data between systems. NiFi implements concepts of Flow-Based Programming and solves common data flow problems faced by enterprises.

AppLocker-Guidance

Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber

AtomicWatch

Intel Atom C2000 series discovery tool that parses log files and returns results if a positive match is found. #nsacyber

BAM

The Binary Analysis Metadata tool gathers information about Windows binaries to aid in their analysis. #nsacyber

beer-garden

The beer-garden application

BitLocker-Guidance

Configuration guidance for implementing BitLocker. #nsacyber

Blocking-Outdated-Web-Technologies

Guidance for blocking outdated web technologies. #nsacyber

Certificate-Authority-Situational-Awareness

Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber

Chinese-State-Sponsored-Cyber-Operations-Observed-TTPs

Supporting files for the Chinese State-Sponsored Cyber Operations: Observed TTPs Cybersecurity Advisory. #nsacyber

CodeGov

Creates a code.gov code inventory JSON file based on GitHub repository information. #nsacyber

Control-Flow-Integrity

A proposed hardware-based method for stopping known memory corruption exploitation techniques. #nsacyber

Cyber-Challenge

Supporting files for cyber challenge exercises. #nsacyber

datawave

DataWave is an ingest/query framework that leverages Apache Accumulo to provide fast, secure data access.

datawave-accumulo-service

datawave-authorization-service

datawave-base-rest-responses

datawave-dictionary-service

The Dictionary service provides access to the data dictionary and edge dictionary. These services provide metadata about fields that are stored in Accumulo.

datawave-hazelcast-service

datawave-in-memory-accumulo

datawave-metrics-reporter

datawave-microservices-root

datawave-muchos

This project leverages Ansible to automate DataWave deployments on your cluster

datawave-query-metric-service

datawave-spring-boot-starter

datawave-spring-boot-starter-audit

datawave-spring-boot-starter-cache

DCP

Digest, stat, and copy files from one location to another in the same read pass

Detect-CVE-2017-15361-TPM

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

dm3k

The Decision Maximizer 3000 optimization project

Driver-Collider

Blocks drivers from loading by using a name collision technique. #nsacyber

emissary

Distributed P2P Data-driven Workflow Framework

enigma-simulator

An educational demonstration of breaking the Enigma machine

Event-Forwarding-Guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

femto

Sequence Indexing and Search

fractalrabbit

Simulate realistic trajectory data seen through sporadic reporting

ghidra

Ghidra is a software reverse engineering (SRE) framework

ghidra-data

Supporting Data Archives for Ghidra

goSecure

An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber

GRASSMARLIN

Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

Hardware-and-Firmware-Security-Guidance

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

HIRS

Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber

HTTP-Connectivity-Tester

Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber

lemongraph

Log-based transactional graph engine

lemongrenade

Data-driven automation platform

LOCKLEVEL

A prototype that demonstrates a method for scoring how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber

MADCert

Create root and intermediate Certificate Authorities, issue user and server certificates, etc. for testing purposes.

Maplesyrup

Assesses CPU security of embedded devices. #nsacyber

Mitigating-Obsolete-TLS

Guidance for mitigating obsolete Transport Layer Security configurations. #nsacyber

Mitigating-Web-Shells

Guidance for mitigation web shells. #nsacyber

NB Gallery

nbgallery is a user-friendly Jupyter notebook sharing and collaboration platform.

netfil

A kernel network manager with monitoring and limiting capabilities for macOS. #nsacyber

netman

A userland network manager with monitoring and limiting capabilities for macOS. #nsacyber

Open Network Operations Platform

Radically simplifies the operation of enterprise networks with SDN applications that reside on top of an OpenFlow-capable network controller.

OpenAttestation

Software Development Kit to enable remotely retrieval and verify target platforms integrity

paccor

Originally posted here:
Home | Open Source @ NSA