Cybersecurity and Infrastructure Security Agency

CISA CSAF Security Advisories

External monitoring for organization assets

Cybersecurity Evaluation Tool

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Automation to assess the state of your M365 tenant against CISA's baselines

SCuBA Secure Configuration Baselines and assessment tool for Google Workspace

A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.

Scan domains and return data based on trustworthy email best practices

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

findCDN is a tool created to help accurately identify what CDN a domain is using.