NSA Cybersecurity Directorate

All

39 repositories

AppLocker-Guidance
Public
Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
windows applocker whitelisting application-whitelisting microsoft-applocker
PowerShell
•
Other
•61•211•1•0•Updated Mar 7, 2025Mar 7, 2025
HIRS
Public
Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber
validation supply-chain provisioning integrity trusted-platform-module trusted-computing
Java
•
Other
•59•184•56•5•Updated Mar 6, 2025Mar 6, 2025
paccor
Public
The Platform Attribute Certificate Creator can gather component details, create, sign, and validate the TCG-defined Platform Credential. #nsacyber
certificate certificates credential trusted-computing
Java
•
Apache License 2.0
•17•60•2•1•Updated Feb 28, 2025Feb 28, 2025
Hardware-and-Firmware-Security-Guidance
Public
Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber
audit vulnerability cve nessus spectre guidance meltdown cve-2017-5754 cve-2017-5715 cve-2017-5753
C
•
Other
•150•792•7•1•Updated Dec 23, 2024Dec 23, 2024
nsacyber.github.io
Public
NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate
github-pages
PowerShell
•
Creative Commons Zero v1.0 Universal
•72•268•0•5•Updated Aug 17, 2024Aug 17, 2024
BAM
Public
The Binary Analysis Metadata tool gathers information about Windows binaries to aid in their analysis. #nsacyber
metadata binary binary-analysis
Python
•
Other
•26•159•8•0•Updated May 2, 2024May 2, 2024
ELITEWOLF
Public
OT security monitoring #nsacyber
Other
•62•589•0•2•Updated Jan 7, 2024Jan 7, 2024
RandPassGenerator
Public
A command-line utility for generating random passwords, passphrases, and raw keys. #nsacyber
password-generator password
Java
•
Other
•28•135•0•2•Updated Dec 22, 2023Dec 22, 2023
Mitigating-Web-Shells
Public
Guidance for mitigation web shells. #nsacyber
guidance webshell mitigation webshells
YARA
•
Other
•204•972•2•2•Updated Jun 18, 2023Jun 18, 2023
Windows-Secure-Host-Baseline
Public archive
Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
windows auditing certificates chrome-browser windows-10 windows-server compliance nessus group-policy applocker
HTML
•
Other
•287•1.6k•14•1•Updated Dec 24, 2022Dec 24, 2022
WALKOFF
Public archive
A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
python security devops automation framework administration integration analytics orchestration-framework sysadmin
Python
•
Other
•221•1.2k•33•24•Updated Dec 12, 2022Dec 12, 2022
PRUNE
Public archive
Logs key Windows process performance metrics. #nsacyber
windows performance process performance-metrics etw
C#
•
Other
•13•66•0•2•Updated Dec 8, 2022Dec 8, 2022
Windows-Event-Log-Messages
Public archive
Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber
windows event-log
C#
•
Other
•97•400•17•1•Updated Dec 8, 2022Dec 8, 2022
Blocking-Outdated-Web-Technologies
Public archive
Guidance for blocking outdated web technologies. #nsacyber
web guidance
PowerShell
•
Other
•16•56•0•0•Updated Dec 9, 2021Dec 9, 2021
Chinese-State-Sponsored-Cyber-Operations-Observed-TTPs
Public archive
Supporting files for the Chinese State-Sponsored Cyber Operations: Observed TTPs Cybersecurity Advisory. #nsacyber
tactics procedures techniques mitre-attack mitre-attack-navigator
Other
•7•43•0•0•Updated Jul 19, 2021Jul 19, 2021
HTTP-Connectivity-Tester
Public archive
Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber
testing http test https connection connectivity diagnostics powershell-module diagnostic
PowerShell
•
Other
•41•107•6•0•Updated Feb 19, 2021Feb 19, 2021
Mitigating-Obsolete-TLS
Public archive
Guidance for mitigating obsolete Transport Layer Security configurations. #nsacyber
tls ssl guidance mitigations snort-rules
PowerShell
•
Other
•40•272•2•0•Updated Feb 3, 2021Feb 3, 2021
Event-Forwarding-Guidance
Public
Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber
windows event-log siem
PowerShell
•
Other
•165•860•5•4•Updated Nov 17, 2020Nov 17, 2020
unfetter
Public archive
Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
unfetter
Other
•39•163•11•2•Updated May 11, 2020May 11, 2020
GRASSMARLIN
Public archive
Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
visualization monitor networking monitoring analysis network control-systems scada-security ics-scada ics
Java
•
Other
•299•959•24•0•Updated Feb 24, 2020Feb 24, 2020
simon-speck
Public archive
The SIMON and SPECK families of lightweight block ciphers. #nsacyber
cryptography crypto cipher cryptography-library crypto-library ciphers simon speck
Other
•35•167•0•0•Updated Nov 12, 2019Nov 12, 2019
BitLocker-Guidance
Public archive
Configuration guidance for implementing BitLocker. #nsacyber
microsoft windows audit nessus guidance full-disk-encryption encryption bitlocker bitlocker-drive-encryption
HTML
•
Other
•37•120•0•0•Updated Jul 24, 2019Jul 24, 2019
WALKOFF-Apps
Public archive
WALKOFF-enabled applications. #nsacyber
python iot security automation administration integration analytics orchestration-framework orchestration cybersecurity
YARA
•
Creative Commons Zero v1.0 Universal
•41•143•4•1•Updated Mar 14, 2019Mar 14, 2019
CodeGov
Public archive
Creates a code.gov code inventory JSON file based on GitHub repository information. #nsacyber
government json gov powershell-module
PowerShell
•
Other
•14•24•0•0•Updated Jan 16, 2019Jan 16, 2019
Cyber-Challenge
Public archive
Supporting files for cyber challenge exercises. #nsacyber
challenge cybersecurity cyber
Jupyter Notebook
•
Other
•22•45•0•0•Updated Oct 5, 2018Oct 5, 2018
Detect-CVE-2017-15361-TPM
Public archive
Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
rsa audit vulnerability cve nessus tpm trusted-platform-module
PowerShell
•
Other
•27•55•1•0•Updated Sep 4, 2018Sep 4, 2018
simon-speck-supercop
Public archive
Fast implementations of the SIMON and SPECK lightweight block ciphers for the SUPERCOP benchmark toolkit. #nsacyber
cryptography crypto cipher cryptography-library crypto-library ciphers simon speck supercop
C
•
Other
•17•46•0•0•Updated Jun 13, 2018Jun 13, 2018
Driver-Collider
Public archive
Blocks drivers from loading by using a name collision technique. #nsacyber
windows driver
C
•
Other
•20•45•0•0•Updated Dec 18, 2017Dec 18, 2017
serial2pcap
Public archive
Converts serial IP data, typically collected from Industrial Control System devices, to the more commonly used Packet Capture (PCAP) format. #nsacyber
converter pcap convert conversion control-systems scada ics-scada
Python
•
Other
•34•75•0•0•Updated Oct 25, 2017Oct 25, 2017
goSecure
Public archive
An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber
linux raspberry-pi strongswan vpn
Python
•
Other
•176•983•3•3•Updated Jun 27, 2017Jun 27, 2017