stacismith1 / OSINT

OSINT

Here I've compiled a list of Open Source SOC tools! I use many of which in my labs and production. Major love for the Open spource and OSINT Community ❤

IDS/IPS:

• Snort
• Suricata
• OSSEC
• ZEEK

Vulnerability Scanning

• OpenVas
• Vega
• OWASP-ZAP
• Nikto
• Tenable Community

Network Monitor

• Nagios
• Cacti
• Icinga2
• Zabbix
• Prometheus

Log Management

• NXLog
• Graylog
• Elasticsearch and Logstash
• Fluentd
• Flume
• Octopussy
• Logalyze
• Logstalgia

Threat Detection & File Monitor

• Wazuh
• Osquery
• Security Onion
• Samhain

Endpoint Security

• OpenEDR
• Wazuh
• Comodo

Firewall

• Pfsense
• Iptables
• Ipfire
• OPNSense
• Smoothwall
• NG Firewall
• UFW

Threat Intelligence

• Maltego
• MISSP
• Virus Total
• X-Force
• Talos
• VirusShare
• Anyrun
• Automated Indicator Sharing
• Infragard
• Mitre Att&ck

Adversary Emulation

• Infection Monkey
• APT Simulator
• Caldera
• Red Canary

SIEM

• OSSIM
• Splunk Trial
• Elasticsearch
• Sagan
• Mozdef
• Apache Metron

Ticket Services

• SpiceWorks
• osTicket
• SuiteCRM
• Liberum

Incident Response

• Cynet 360
• GRR Rapid Response
• AlienVault
• Cyphon
• Volatility
• Autopsy
• XSOAR
• CyberCPR
• FTK Imager
• Doorman
• Mozdef
• CimSweep
• TheHive
• SIFT

Malware Analysis

• Yara
• GRR
• Bro
• Cuckoo Sandbox
• Anyrun
• VirusTotal

WAF

• ModSecurity
• Cloudflare
• WebKnight

DNS Security

• Cloudflare
• Quad9