All Categories → Operations → incident-response

Top 114 incident-response open source projects

Asn
ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation and geolocation lookup tool / Traceroute server
Dfirtrack
DFIRTrack - The Incident Response Tracking Application
Vast
🔮 Visibility Across Space and Time
Atc React
A knowledge base of actionable Incident Response techniques
Scot
Sandia Cyber Omni Tracker (SCOT)
Dfir Orc
Forensics artefact collection tool for systems running Microsoft Windows
Pockint
A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️
Pypowershellxray
Python script to decode common encoded PowerShell scripts
Litmus test
Detecting ATT&CK techniques & tactics for Linux
Osctrl
Fast and efficient osquery management
Weffles
Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
Imago Forensics
Imago is a python tool that extract digital evidences from images.
Aurora Incident Response
Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
Misp Taxonomies
Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
Oriana
Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
Sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Edr Testing Script
Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
Mthc
All-in-one bundle of MISP, TheHive and Cortex
Information Security Tasks
This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions
Siac
SIAC is an enterprise SIEM built on open-source technology.
Threathunt
ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
Awesome
A curated list of awesome things related to TheHive & Cortex
Response
Monzo's real-time incident response and reporting tool ⚡️
Yara Endpoint
Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
Wheel Of Misfortune
A role-playing game for incident management training
Historicprocesstree
An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.
Ios Triage
incident response tool for iOS devices
Analyst Casefile
Maltego CaseFile entities for information security investigations, malware analysis and incident response
Beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
Incident Response Docs
PagerDuty's Incident Response Documentation.
Bashfuscator
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
Cyberchef Recipes
A list of cyber-chef recipes and curated links
Osquery Configuration
A repository for using osquery for incident detection and response
Intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Cyphon
Open source incident management and response platform.
Opcde
OPCDE Cybersecurity Conference Materials
Fcl
FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
1-60 of 114 incident-response projects