Resources

Open-source tools

Tools we use on engagements, released because they are more useful shared.

Showing 2 of 2 items — 2 still being written, and each one says so on its own page.

Open-source toolFeaturedGitHub
trustgraph — enumerate every privilege path in an AWS organisation
Reads actual IAM policy documents, trust relationships, permission boundaries and SCPs rather than the console summary, and outputs the reachability graph as queryable data. Runs from a read-only role you create and can delete. MIT, no telemetry, no account required.
Daniel Okafor · 30 May 2026View tool
Open-source toolGitHub
logsource-check — prove your log sources are actually delivering
Compares configured sources against events actually received over a window, per source and per host, for Sentinel, Elastic and Wazuh. Written because we kept finding dead sources by hand on onboarding. MIT.
Daniel Okafor · 2 Jul 2026View tool