Incident Response
218 items from meirwah/awesome-incident-response ★9,444
-
NullSec LogReaper github.com
High-speed log analysis and forensics tool with multi-format parsing, pattern matching, timeline reconstruction and anomaly detection for incident response.
-
SPECTR3 github.com
Acquire, triage and investigate remote evidence via portable iSCSI readonly access
-
Panorama github.com
Fast incident overview on live Windows systems.
-
traceroute-circl github.com
Extended traceroute to support the activities of CSIRT (or CERT) operators. Usually CSIRT team have to handle incidents based on IP addresses received. Created by Computer Emergency Response Center Luxembourg.
-
PyaraScanner github.com
Very simple multi-threaded many-rules to many-files YARA scanning Python script for malware zoos and IR.
-
domfind github.com
Python DNS crawler for finding identical domain names under different TLDs.
-
Falcon Orchestrator github.com
Extendable Windows-based application that provides workflow automation, case management and security response functionality.
-
sqhunter github.com
Threat hunter based on osquery and Salt Open (SaltStack) that can issue ad-hoc or distributed queries without the need for osquery's tls plugin. sqhunter allows you to query open network sockets and check them against threat intelligence sources.
