zentral by zentralopensource
Zentral is a high-visibility platform for controlling Apple endpoints in enterprises. It brings great observability to IT and makes tracking & reporting compliance much less manual.
created at Oct. 20, 2015, 2:03 p.m.
nightHawkResponse by biggiesmallsAG
Incident Response Forensic Framework
created at July 6, 2016, 11:02 a.m.
falcon-orchestrator by CrowdStrike
CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
created at April 22, 2016, 1:25 a.m.
CIRTKit by opensourcesec
Tools for the Computer Incident Response Team 
created at Oct. 19, 2015, 3:50 p.m.
awesome-forensics by cugu
⭐️ A curated list of awesome forensic analysis tools and resources
created at March 29, 2016, 8:54 p.m.
atomic-red-team by redcanaryco
Small and highly portable detection tests based on MITRE's ATT&CK.
created at Oct. 11, 2017, 5:23 p.m.
APTSimulator by NextronSystems
A toolset to make a system look as if it was the victim of an APT attack
created at Feb. 3, 2018, 2:19 p.m.
metta by uber-common
An information security preparedness tool to do adversarial simulation.
created at Nov. 1, 2017, 9:24 p.m.
RedHunt-OS by redhuntlabs
Virtual Machine for Adversary Emulation and Threat Hunting
created at March 14, 2018, 7:31 p.m.
diffy by Netflix-Skunkworks
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
created at May 1, 2018, 10:11 p.m.
fibratus by rabbitstack
Adversary tradecraft detection, protection, and hunting
created at March 25, 2016, 11:28 a.m.