incident-response

There are 104 repositories under incident-response topic.

dastergon / awesome-sre
A curated list of Site Reliability and Production Engineering resources.
alerting availability awesome awesome-list capacity-planning devops incident-response list monitoring on-call post-mortem postmortem production reliability reliability-engineering scalability service-level-agreement site-reliability site-reliability-engineering sre
11685
kubeshark
kubeshark / kubeshark
The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes
kubernetes microservices golang rest grpc amqp kafka redis go microservice microservices-application devops devops-tools sniffer observability wireshark cloud-native docker forensics incident-response
Language:Go 10704
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C 9618
howtheysre
upgundecha / howtheysre
A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)
alerting chaos-engineering dev-ops devops hacktoberfest hacktoberfest-accepted hacktoberfest2022 incident-management incident-response infrastructure monitoring observability on-call post-mortem reliability security site-reliability-engineering software-engineering sre sre-culture
Language:JavaScript 8994
toniblyx / my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
cloud auditing incident-response aws-inventory iam dfir cloudtrail aws-infrastructure aws-lambda security security-tools
Language:Shell 8803
meirwah / awesome-incident-response
A curated list of tools for incident response
awesome awesome-list cybersecurity dfir incident-response incident-response-tooling list security
7326
OneUptime / oneuptime
OneUptime is the complete open-source observability platform.
devops incident-management incident-response monitoring observability on-call status-page
Language:TypeScript 4535
0x4D31 / awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️
awesome awesome-list detection incident-response security threat-detection threat-hunting
3456
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
misp security-incidents analyzer iocs thehive digital-forensics incident-response rest api scala investigations dfir free open-source platform cortex agplv3 orchestration incident-management incident-response-tooling
Language:Scala 3279
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 3186
velociraptor
Velocidex / velociraptor
Digging Deeper....
digital-forensics endpoint-discovery endpoint-protection endpoint-security forensics-investigations incident-response inventory-management
Language:Go 2767
sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
sleuthkit tct ntfs forensics incident-response
Language:C 2517
BlueTeam-Tools
A-poc / BlueTeam-Tools
Tools and Techniques for Blue Team / Incident Response
blue-team blueteam cheatsheet incident-response malware-analysis tools vulnerability-management wiki incident resources cyber-security defender
2510
volatilityfoundation / volatility3
Volatility 3.0 development
digital-investigation forensics incident-response malware memory python ram volatility volatility-framework
Language:Python 2357
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
dfir threat hunting windows event logs rust sigma detection attack forensics incident response hayabusa yamato security cybersecurity incident-response security-automation threat-hunting
Language:Rust 2064
mattnotmax / cyberchef-recipes
A list of cyber-chef recipes and curated links
cyberchef malware dfir incident-response data-manipulation cyberchef-recipes regular-expression
1951
PersistenceSniper
last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
incident-response malware-detection persistence powershell powershell-module powershell-script registry techniques windows
Language:PowerShell 1831
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
forensics osint cybersecurity hacking security-automation security-tools infosec awesome-list incident-response penetration-testing reconnaissance security awesome pentesting bug-bounty
1565
Bashfuscator / Bashfuscator
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
bash linux linux-shell obfuscation red-team blue-team evasion incident-response infosec
Language:Python 1542
monzo / response
Monzo's real-time incident response and reporting tool ⚡️
incident incident-management incident-reports incident-response response slack-bot
Language:JavaScript 1511
Incident-Playbook
austinsonger / Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
catalog contributions-welcome contributors-welcome cybersecurity cybersecurity-playbook incident-management incident-response incidents mitre mitre-attack playbook
1373
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
response dfir analysis analyzer thehive engine scala python rest api security-incidents digital-forensics iocs observable free free-software open-source incident-response cyber-threat-intelligence cortex
Language:Scala 1277
beagle
yampelo / beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
dfir digital-forensics forensic-analysis graph incident-response security threat-hunting
Language:Python 1262
dastergon / postmortem-templates
A collection of postmortem templates
site-reliability-engineering site-reliability devops postmortem incident-reports post-mortem postmortem-templates incident-reporting incident-response sre
1255
asn
nitefood / asn
ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server
api as-path asn asn-lookup autonomous-systems bash bgp fingerprinting geolocation incident-response ip-lookup ip-reputation mtr osint recon rpki shodan team-cymru traceroute whois
Language:Shell 1224
ahmedkhlief / APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
apt-attacks forensic-analysis incident-response purpleteam python3 threat-hunting windows-event-logs windows-eventlog
Language:Python 1191
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1077
cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
architecture cert csirt detection incident-response management mitre-attack purpleteam risk-management siem sirp soa soar soc tip ttp
1071
PagerDuty / incident-response-docs
PagerDuty's Incident Response Documentation.
documentation incident-response oncall pagerduty team-security
Language:Dockerfile 1012
mdecrevoisier / Microsoft-eventlog-mindmap
Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...
mindmap evtx windows incident-response azure exchange active-directory
988
dfir-iris / iris-web
Collaborative Incident Response platform
forensic incident-response csirt-tooling python digital-forensics digital-forensics-incident-response forensic-analysis forensic-tools
Language:JavaScript 970
certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
cybersecurity threat ioc malware phishing cert csirt intelligence incident-response alerts feeds incident handling automation ihap python
Language:Python 948
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
compliance cyber-security detection-engineering forensics-tools incident-management incident-response information-security infosec intrusion-detection kali-linux mitre-attack network-analysis offensive-security pentesters privacy-protection scanning-tool siem surveillance vulnerabilities vulnerability-detection
Language:Go 876
certsocietegenerale / fame
FAME Automates Malware Evaluation
framework incident-response infosec malware malware-analysis malware-research
Language:Python 840
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
cybersecurity threat-hunting django reactjs rss-bridge misp thehive security incident-response threat-detection threat-intelligence nltk watcher certificate-transparency certstream osint osint-python webapp monitoring phishing
Language:Python 816
palantir / osquery-configuration
A repository for using osquery for incident detection and response
detection incident-response information-security octo-correct-managed osquery
811

incident-response

dastergon / awesome-sre

kubeshark / kubeshark

wazuh / wazuh

upgundecha / howtheysre

toniblyx / my-arsenal-of-aws-security-tools

meirwah / awesome-incident-response

OneUptime / oneuptime

0x4D31 / awesome-threat-detection

TheHive-Project / TheHive

intelowlproject / IntelOwl

Velocidex / velociraptor

sleuthkit / sleuthkit

A-poc / BlueTeam-Tools

volatilityfoundation / volatility3

Yamato-Security / hayabusa

mattnotmax / cyberchef-recipes

last-byte / PersistenceSniper

danieldurnea / FBI-tools

Bashfuscator / Bashfuscator

monzo / response

austinsonger / Incident-Playbook

TheHive-Project / Cortex

yampelo / beagle

dastergon / postmortem-templates

nitefood / asn

ahmedkhlief / APT-Hunter

emalderson / ThePhish

cyb3rxp / awesome-soc

PagerDuty / incident-response-docs

mdecrevoisier / Microsoft-eventlog-mindmap

dfir-iris / iris-web

certtools / intelmq

mikeroyal / Open-Source-Security-Guide

certsocietegenerale / fame

thalesgroup-cert / Watcher

palantir / osquery-configuration