nightHawkResponse by biggiesmallsAG
Incident Response Forensic Framework
created at July 6, 2016, 11:02 a.m.
CimSweep by mattifestation
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
created at Jan. 30, 2016, 4:58 a.m.
diffy by Netflix-Skunkworks
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
created at May 1, 2018, 10:11 p.m.
stringsifter by mandiant
A machine learning tool that ranks strings based on their relevance for malware analysis.
created at Sept. 5, 2019, 1:02 p.m.
WELA by Yamato-Security
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
created at May 13, 2021, 10:33 p.m.
zentral by zentralopensource
Zentral is a high-visibility platform for controlling Apple endpoints in enterprises. It brings great observability to IT and makes tracking & reporting compliance much less manual.
created at Oct. 20, 2015, 2:03 p.m.
Aurora-Incident-Response by cyb3rfox
Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
created at June 9, 2020, 12:12 p.m.
security-apis by deralexxx
A collective list of public APIs for use in security. Contributions welcome
created at Jan. 9, 2018, 7:58 p.m.