nightHawkResponse by biggiesmallsAG

Incident Response Forensic Framework

updated at April 27, 2024, 8:49 a.m.

82 +0

596 +0

139 +0

stenographer by google

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com

updated at May 24, 2024, 10:23 p.m.

104 +0

1,789 +0

234 +0

catalyst by SecurityBrewery

Catalyst is an open source SOAR and ticket system that helps to automate alert handling and incident response processes

updated at June 11, 2024, 10:16 a.m.

5 +0

283 +1

35 +0

artifactcollector by forensicanalysis

🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system

updated at June 14, 2024, 8:30 p.m.

9 +0

250 +4

19 +0

flightsim by alphasoc

A utility to safely generate malicious network traffic patterns and evaluate controls.

updated at June 15, 2024, 4:59 a.m.

35 +0

1,212 +5

129 +1

fibratus by rabbitstack

A modern tool for Windows kernel exploration and tracing with a focus on security

updated at June 15, 2024, 5:30 a.m.

71 +0

2,102 +6

184 +0

spyre by spyre-project

simple YARA-based IOC scanner

updated at June 15, 2024, 4:03 p.m.

12 +0

159 -1

27 +0

velociraptor by Velocidex

Digging Deeper....

updated at June 16, 2024, 2:06 a.m.

72 -1

2,747 +10

461 +2

fleet by fleetdm

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)

updated at June 16, 2024, 4:01 a.m.

31 +1

2,530 +267

370 +10