128 Open source projects that are alternatives of or similar to assisted-log-enabler-for-aws

Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI

Digital Forensics Investigation Platform

Monzo's real-time incident response and reporting tool ⚡️

Infosec resource center for offensive and defensive security operations.

Wazuh - Docker containers

SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.

This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

Wazuh - Puppet module

A role-playing game for incident management training

Cyber-investigation Analysis Standard Expression (CASE) Ontology

DFIRTrack - The Incident Response Tracking Application

Catalyst is an open source SOAR system that helps to automate alert handling and incident response processes

An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.

Legal, procedural and policies document templates for operating an IRT

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Cyber Incident Response Team Playbook Battle Cards

Maltego CaseFile entities for information security investigations, malware analysis and incident response

A Lambda-powered Security Orchestration framework for AWS GuardDuty

Forensics artefact collection tool for systems running Microsoft Windows

Simple Live Data Collection Tool

PagerDuty's Incident Response Documentation.

Parses Windows event logs files based on SANS Poster

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

Incident Response collection and processing scripts with automated reporting scripts

Python API Client for Cortex

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Cortex Analyzers Repository

CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

Pre-configured response & remediation playbooks for AWS Security Hub

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

#ThreatHunting #DFIR #Malware #Detection Mind Maps

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Carve file metadata from NTFS index ($I30) attributes

Python script to decode common encoded PowerShell scripts

Collaborative Incident Response platform

FAME Automates Malware Evaluation

ThePhish: an automated phishing email analysis tool

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

Prototype to collect data and analyse it from a compromised macOS device.

A repository for using osquery for incident detection and response

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

A knowledge base of actionable Incident Response techniques

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

Open source incident management and response platform.

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

Invoke-LiveResponse

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

🦄🔒 Awesome list of secrets in environment variables 🖥️

Wazuh - The Open Source Security Platform

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation and geolocation lookup tool / Traceroute server

Wazuh - Kibana plugin

Fast and efficient osquery management

SIAC is an enterprise SIEM built on open-source technology.

Information gathering & website reconnaissance | https://phishstats.info/