Network security engineer cheat sheet
Come along with me on a public learning journey into AWS Cloud and DevOps, designed specifically for those without a technical background. I'll be documenting each step in straightforward, easy-to-understand language to help others make a smooth transition into DevOps. Together, we'll delve into continuous integration, deployment, and automation, breaking down complex concepts into manageable, actionable insights.
Wireshark - Network protocol analysis
Nmap - the Network Mapper.
Suricata -Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine developed by the OISF and the Suricata community.
Snort -Snort 3 is the next generation Snort IPS (Intrusion Prevention System)
tcpdump -the TCPdump network dissector
Zeek -Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
OpenVPN -is an open-source VPN daemon
Wiregaurd - simple yet fast and modern VPN that utilizes state of the art cryptography
PF-ring - High-speed packet processing framework
NetCat for Windows
IPFire- IPFire is a hardened, versatile, state-of-the-art Open Source firewall based on Linux. Its ease of use, high performance in any scenario, and extensibility make it usable for everyone.
The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with a custom kernel and includes third-party free software packages for additional functionality
The OPNsense project invites developers to start contributing to the code base, for your purposes or – even better – to join us in creating the best open-source firewall available.
IP tables - Administration tool for IPV4 packet filtering and NAT
ettercap - comprehensive suite for man-in-the-middle attacks on LAN
FRRouting -IP routing protocol suit or Linux an Unix platform
Quagga Tracking repository- free software that manages various IPv4 and IPv6 routing protocols.
Mikrotik RouterOS tools and scripts
sflow tool -This tool receives sFlow data, and generates ASCII, JSON, CSV, tcpdump(1) or NetFlow(TM) output.
DNSCrypt -dnscrypt-proxy 2 - A flexible DNS proxy supporting encrypted DNS protocols.
pi-hole -network-wide ad blocker A black hole for Internet advertisements
cilium -Cilium is a networking, observability, and security solution with an eBPF-based data plane. It provides a simple flat Layer 3 network that can span multiple clusters in either a native routing or overlay mode.
projectcalico / calico -Cloud native networking and network security open-source project with an active development and user community. Calico Open Source has grown to be the most widely adopted solution for container networking and security, powering 8M+ nodes daily across 166 countries.
flannel -flannel is a network fabric for containers, designed for Kubernetes Flannel is a simple and easy way to configure a layer 3 network fabric designed for Kubernetes
weaveworks/weave : Simple, resilient multi-host containers networking and more. This repository contains Weave Net, the first product developed by Weaveworks, with over 8 million downloads to date. Weave Net enables you to get started with Docker clusters and portable apps in a fraction of the time required by other solutions.
linkerd/linkerd2 : Linkerd is an ultralight, security-first service mesh for Kubernetes. Linkerd adds critical security, observability, and reliability features to your Kubernetes stack with no code change required.
