Host Security Playbook

GitHub

Home
Overview
Overview
Getting Started
Getting Started
- Onboarding Playbooks
  Onboarding Playbooks
- Cloud Accounts
  Cloud Accounts
  - Prerequisites
    Prerequisites
    
    AWS
    
    Azure
    
    GCP
  - Onboarding
    Onboarding
    
    AWS
    
    Azure
    
    GCP
    
    Offboard Clound Account
- Workloads
  Workloads
  - Kubernetes
    Kubernetes
    
    Runtime Security Prerequisites
    
    Runtime Security Onboarding
    
    Cluster Onboarding with Access Keys
    
    Cluster Miconfiguration Scan Onboarding
    
    CIS Benchmarking
    
    Cluster Offboarding
  - VM/Bare Metal
    VM/Bare Metal
    
    VM Onboard/Deboard with Docker
    
    VM Onboard/Deboard with SystemD
    
    SystemD Based Non-BTF Environments
    
    VM Onboarding with Access Keys
  - Generate CWPP Reports
  - Sample Workloads Protection
    Sample Workloads Protection
    
    WordPress-MySQL
    
    DVWA
    
    PHP-MySQL
- ASPM Overview
  ASPM Overview
  - Github IaC Scan
- Container Registry
  Container Registry
  - ACR
  - ECR
  - GAR
  - Harbor
  - Dockerhub Registry
  - Docker Trusted Registry
  - Sonatype Nexus
  - JFrog Container
  - Quay
- OnPrem
  OnPrem
  - On-prem Installation
  - Security on OpenShift
- Open Source
  Open Source
  - Open source vs Enterprise
  - Open Source Installation
- Signup/Login via SSO
- Create Tokens
- Create Labels
- Create Access Keys
- Reports
  Reports
  - Configure Custom Report
  - Summarized Custom Report
Integrations
Integrations
- CI/CD
  CI/CD
  - Azure DevOps
    Azure DevOps
    
    DAST
    
    SAST
    
    Container Image Scan
    
    Iac Scan
  - Google Cloud Build
    Google Cloud Build
    
    DAST
    
    SAST
    
    Container Image Scan
    
    IaC Scan
  - Harness
    Harness
    
    DAST
    
    SAST
    
    Container Image Scan
    
    IaC Scan
  - Jenkins
    Jenkins
    
    DAST
    
    SAST
    
    Container Scan
    
    IaC Scan
  - AWS Code Pipeline
    AWS Code Pipeline
    
    DAST
    
    SAST
    
    Container Scan
    
    IaC Scan
  - GitHub
    GitHub
    
    Onboard Private Repos
    
    Github DAST
    
    Github SAST
    
    Github Container Scan
    
    Github IaC Scan
  - Gitlab
    Gitlab
    
    DAST
    
    SAST
    
    Container Scan
    
    IaC Scan (AccuKnox)
    
    IaC Scan (GitLab Pipeline)
    
    Scan Variables
    Scan Variables
    
    Container Scan Variables
    
    IaC Scan Variables
    
    DAST Scan Variables
    
    SAST Scan variables
  - Bitbucket
    Bitbucket
    
    DAST
    
    SAST
    
    Container Scan
    
    IaC Scan
    
    Scan Variables
    Scan Variables
    
    Container Scan Variables
    
    IaC Scan Variables
    
    DAST Scan Variables
    
    SAST Scan variables
  - CheckMarx
    CheckMarx
    
    SAST
    
    SCA
    
    Iac Scan (KICS)
    
    Container Scan
- Registry Scan
- K8s Management
  K8s Management
  - Rafay
  - Mirantis Lens
    Mirantis Lens
    
    KubeArmor
    
    AccuKnox Agents
  - Nutanix
    Nutanix
    
    AccuKnox
    
    KubeArmor
  - SpectroCloud
- Ticketing
  Ticketing
- SIEM Events
  SIEM Events
  - Telemetry (Sample)
    Telemetry (Sample)
    
    Logs
    
    Alerts
  - Splunk
  - AccuKnox SplunkApp
  - KubeArmor Splunk Integration
  - Azure Sentinel
  - Azure Sentinel Feeder Integration
  - Rsyslog
  - Rsyslog Feeder Integration
  - AWS Cloudwatch
- Notification
  Notification
  - Slack
  - Email
- OAuth
- Email Backend
Use-Cases
Use-Cases
- CNAPP Security Overview
- AI/ML Security
  AI/ML Security
  - Jupyter Notebook
  - ModelArmor
    ModelArmor
    
    Overview
    
    Pickle Code Injection PoC
    
    Adversarial Attacks on Deep Learning Models
    
    Deploy PyTorch App with ModelKnox
- Cloud Security Posture Management (CSPM)
  Cloud Security Posture Management (CSPM)
  - Overview
  - Asset Inventory
  - Azure Security
    Azure Security
    
    Overview
    
    Network Security
    
    Compute Security
    
    Database Security
  - AWS Security
    AWS Security
    
    Overview
    
    IAM Security
    
    Network Security
    
    Compute Security
    
    Storage Security
  - GCP Security
    GCP Security
    
    Overview
    
    IAM Security
    
    Network Security
    
    Compute Security
  - GRC
    GRC
    
    Multi-cloud Compliance
    
    Cloud Misconfiguration and Drift Detection
- Cloud Workload Protection Platform (CWPP)
  Cloud Workload Protection Platform (CWPP)
  - CWPP Overview
  - Least Permissive Posture Assessment (CWPP)
    Least Permissive Posture Assessment (CWPP)
    
    Zero Trust Security
    
    Audit/Forensics
    
    Runtime Application Behavior Discovery
  - Securing Secrets Managers (CWPP)
    Securing Secrets Managers (CWPP)
    
    HashiCorp Vault Hardening
    
    CyberArk Conjur Hardening
  - Advanced Persistent Threat (CWPP)
    Advanced Persistent Threat (CWPP)
    
    Cryptojacking
    
    Hildegard
  - Container Image Scan
- DevSecOps (ASPM)
  DevSecOps (ASPM)
- Kubernetes Security Posture Management (KSPM)
  Kubernetes Security Posture Management (KSPM)
- Vulnerability Management (CNAPP)
  Vulnerability Management (CNAPP)
- VM Security
  VM Security
  - Introduction
  - Agentless Risk Assessment
    Agentless Risk Assessment
    
    Misconfiguration of Cloud Hosted VMs
    Misconfiguration of Cloud Hosted VMs
    
    Overview
    
    AWS Misconfigurations
    
    GCP Misconfigurations
    
    Azure Misconfigurations
    
    Host Security Scan
    
    Malware Scan
    
    Compliance Benchmarking & Risk Assessment
  - Agent-based Detection & Remediation
    Agent-based Detection & Remediation
    
    Audit & Log Management
    
    Workload Hardening
    Workload Hardening
    
    Blocking Execution of Package Managers
    
    File Integrity Monitoring
  - Advanced Threat Protection
    Advanced Threat Protection
    
    Preventing Cryptominers Attack
    
    Defending against Log4Shell
  - Reporting
    Reporting
    
    OnDemand and Scheduled
    
    Host Scan Report
- Access Keys
- IoT/Edge Security
- 5G Security
Support Matrix
Support Matrix
Resources
Resources
- CWPP Troubleshooting
- CSPM Troubleshooting
- User Manual
- Marketplace
  Marketplace
  - RedHat Marketplace Installation Guide
  - AWS Marketplace
    AWS Marketplace
    
    KubeArmor Installation Guide
    
    AWS Installation Guide
    
    KubeArmor EKS add-on
  - Oracle Marketplace Installation Guide
  - Azure Marketplace Installation Guide
- Customer Data Backup Guide
- Upgrading AccuKnox Agents
- Calculate Pricing
  Calculate Pricing
- Ticketing Procedures
- Technical Guide
- Release Notes
  Release Notes
  - AccuKnox
    AccuKnox
    
    v2.1-v2.2 Release Notes
    
    v2.0 Release Notes
    
    v1.7 Release Notes
    
    v1.6 Release Notes
    
    v1.5 Release Notes
  - KubeArmor
- Glossary
FAQs