incident-response

There are 96 repositories under incident-response topic.

dastergon / awesome-sre
A curated list of Site Reliability and Production Engineering resources.
site-reliability-engineering production availability monitoring post-mortem reliability-engineering capacity-planning service-level-agreement scalability reliability alerting on-call site-reliability postmortem incident-response sre awesome awesome-list devops list
11475
kubeshark
kubeshark / kubeshark
The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes
kubernetes microservices golang rest grpc amqp kafka redis go microservice microservices-application devops devops-tools sniffer observability wireshark cloud-native docker forensics incident-response
Language:Go 10532
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security security-automation security-tools siem xdr configuration-assessement incident-response pci-dss security-audit security-hardening wazuh
Language:C 9118
howtheysre
upgundecha / howtheysre
A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)
alerting chaos-engineering dev-ops devops hacktoberfest hacktoberfest-accepted hacktoberfest2022 incident-management incident-response infrastructure monitoring observability on-call post-mortem reliability security site-reliability-engineering software-engineering sre sre-culture
Language:JavaScript 8906
toniblyx / my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
auditing aws-infrastructure aws-inventory aws-lambda cloud cloudtrail dfir iam incident-response security security-tools
Language:Shell 8689
meirwah / awesome-incident-response
A curated list of tools for incident response
awesome awesome-list cybersecurity dfir incident-response incident-response-tooling list security
7095
OneUptime / oneuptime
OneUptime is the complete open-source observability platform.
devops incident-management incident-response monitoring observability on-call status-page
Language:TypeScript 4029
0x4D31 / awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️
awesome awesome-list detection incident-response security threat-detection threat-hunting
3314
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
misp security-incidents analyzer iocs thehive digital-forensics incident-response rest api scala investigations dfir free open-source platform cortex agplv3 orchestration incident-management incident-response-tooling
Language:Scala 3211
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 3102
velociraptor
Velocidex / velociraptor
Digging Deeper....
digital-forensics endpoint-discovery endpoint-protection endpoint-security forensics-investigations incident-response inventory-management
Language:Go 2639
sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
forensics incident-response ntfs sleuthkit tct
Language:C 2469
BlueTeam-Tools
A-poc / BlueTeam-Tools
Tools and Techniques for Blue Team / Incident Response
blue-team blueteam cheatsheet incident-response malware-analysis tools vulnerability-management wiki incident resources cyber-security defender
2333
volatilityfoundation / volatility3
Volatility 3.0 development
digital-investigation forensics incident-response malware memory python ram volatility volatility-framework
Language:Python 2198
mattnotmax / cyberchef-recipes
A list of cyber-chef recipes and curated links
cyberchef cyberchef-recipes data-manipulation dfir incident-response malware regular-expression
1928
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
attack cybersecurity detection dfir event forensics hayabusa hunting incident incident-response logs response rust security security-automation sigma threat threat-hunting windows yamato
Language:Rust 1919
PersistenceSniper
last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
incident-response malware-detection persistence powershell powershell-module powershell-script registry techniques windows
Language:PowerShell 1799
monzo / response
Monzo's real-time incident response and reporting tool ⚡️
incident response incident-response incident-management incident-reports slack-bot
Language:JavaScript 1505
Bashfuscator / Bashfuscator
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
bash linux linux-shell obfuscation red-team blue-team evasion incident-response infosec
Language:Python 1501
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
forensics osint cybersecurity hacking security-automation security-tools infosec awesome-list incident-response penetration-testing reconnaissance security awesome pentesting bug-bounty
1487
Incident-Playbook
austinsonger / Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
catalog contributions-welcome contributors-welcome cybersecurity cybersecurity-playbook incident-management incident-response incidents mitre mitre-attack playbook
1351
beagle
yampelo / beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
security digital-forensics incident-response graph dfir forensic-analysis threat-hunting
Language:Python 1259
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
response dfir analysis analyzer thehive engine scala python rest api security-incidents digital-forensics iocs observable free free-software open-source incident-response cyber-threat-intelligence cortex
Language:Scala 1240
dastergon / postmortem-templates
A collection of postmortem templates
site-reliability-engineering site-reliability devops postmortem incident-reports post-mortem postmortem-templates incident-reporting incident-response sre
1223
asn
nitefood / asn
ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server
asn asn-lookup autonomous-systems ip-lookup team-cymru as-path mtr traceroute osint incident-response ip-reputation rpki bash bgp geolocation fingerprinting api shodan whois recon
Language:Shell 1173
ahmedkhlief / APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
threat-hunting purpleteam python3 windows-eventlog apt-attacks incident-response forensic-analysis windows-event-logs
Language:Python 1141
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1037
cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
cert csirt detection soc siem sirp soa soar tip architecture incident-response management mitre-attack purpleteam risk-management ttp
1012
PagerDuty / incident-response-docs
PagerDuty's Incident Response Documentation.
documentation incident-response oncall pagerduty team-security
Language:Dockerfile 1005
mdecrevoisier / Microsoft-eventlog-mindmap
Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...
mindmap evtx windows incident-response azure exchange active-directory
987
dfir-iris / iris-web
Collaborative Incident Response platform
forensic incident-response csirt-tooling python digital-forensics digital-forensics-incident-response forensic-analysis forensic-tools
Language:JavaScript 932
certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
cybersecurity threat ioc malware phishing cert csirt intelligence incident-response alerts feeds incident handling automation ihap python
Language:Python 931
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering kali-linux offensive-security information-security siem compliance cyber-security scanning-tool incident-response forensics-tools surveillance
Language:Go 846
certsocietegenerale / fame
FAME Automates Malware Evaluation
malware malware-analysis malware-research framework infosec incident-response
Language:Python 832
palantir / osquery-configuration
A repository for using osquery for incident detection and response
osquery incident-response detection information-security octo-correct-managed
803
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
cybersecurity threat-hunting django reactjs rss-bridge misp thehive security incident-response threat-detection threat-intelligence nltk watcher certificate-transparency certstream osint osint-python webapp monitoring phishing
Language:Python 794

incident-response

dastergon / awesome-sre

kubeshark / kubeshark

wazuh / wazuh

upgundecha / howtheysre

toniblyx / my-arsenal-of-aws-security-tools

meirwah / awesome-incident-response

OneUptime / oneuptime

0x4D31 / awesome-threat-detection

TheHive-Project / TheHive

intelowlproject / IntelOwl

Velocidex / velociraptor

sleuthkit / sleuthkit

A-poc / BlueTeam-Tools

volatilityfoundation / volatility3

mattnotmax / cyberchef-recipes

Yamato-Security / hayabusa

last-byte / PersistenceSniper

monzo / response

Bashfuscator / Bashfuscator

danieldurnea / FBI-tools

austinsonger / Incident-Playbook

yampelo / beagle

TheHive-Project / Cortex

dastergon / postmortem-templates

nitefood / asn

ahmedkhlief / APT-Hunter

emalderson / ThePhish

cyb3rxp / awesome-soc

PagerDuty / incident-response-docs

mdecrevoisier / Microsoft-eventlog-mindmap

dfir-iris / iris-web

certtools / intelmq

mikeroyal / Open-Source-Security-Guide

certsocietegenerale / fame

palantir / osquery-configuration

thalesgroup-cert / Watcher