incident-response-tooling
There are 12 repositories under incident-response-tooling topic.
meirwah / awesome-incident-response
A curated list of tools for incident response
- TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
Language:Scala 3235 cyb3rfox / Aurora-Incident-Response
Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
Language:JavaScript 726- Language:Python 465
awslabs / aws-cloudsaga
AWS CloudSaga - Simulate security events in AWS
Language:Python 427aws-samples / aws-health-aware
AHA is an incident management & communication framework to provide real-time alert customers when there are active AWS event(s). For customers with AWS Organizations, customers can get aggregated active account level events of all the accounts in the Organization. Customers not using AWS Organizations still benefit alerting at the account level.
Language:Python 319- Language:Python 259
BSI-Bund / RdpCacheStitcher
RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
Language:C++ 227Correia-jpv / fucking-awesome-incident-response
A curated list of tools for incident response. With repository stars⭐ and forks🍴
- Language:Go 130
- sandfly-entropyscan
sandflysecurity / sandfly-entropyscan
Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes.
Language:Go 129 - sysdiagnose
EC-DIGIT-CSIRC / sysdiagnose
Forensic toolkit for iOS sysdiagnose feature
Language:Python 107 lawndoc / mediator
An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.
Language:Python 97- Language:HTML 51
MutableSecurity / mutablesecurity
CLI program for automating the setup, configuration, and use of cybersecurity solutions
Language:Python 41paulveillard / cybersecurity-incident-response
A collection of awesome tools, software, libraries, learning tutorials & videos, frameworks, best practices and technical resources about Incident Response & Management in Cybersecurity
HellishPn / Volatility-MM-CS
Volatility MindMap & Cheat Sheet
Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.
Language:Python 17AlecRandazzo / Packrat
Live system forensic collector
Language:Go 16WesSec / VelociDeploy-o-Matic
Scripts to for ready-to-use Velociraptor instance deployment in Azure
Language:HCL 11availabl-co / cwtune
CLI for selecting and back-testing CloudWatch alarm configuration
Language:Python 10aniketdvd / webams
WebAMS is an Open Source web application for reporting and resolving incidents or tickets
Language:HTML 9DFE-Digital / slack-incident-bot
A Slack app used for incident management at Department for Education Digital
Language:Ruby 7NextSecurity / Cortex-Analyzers-Modified
Cortex-Analyzers Modified - SecTeam/CERT/SOC Security orchestration tools on steroids
Language:Python 6timobrembeck / devops-chatbot
Incident management chatbot for DevOps
Language:Java 6andygrunwald / go-incident
Go client library for accessing the Incident.io API
Language:Go 5firew33d / awesome-incident-response
A curated list of tools for incident response
Rayraegah / postmortem
Get to the root cause of an issue, learn from it, and make sure it doesn’t happen again.
righettod / log4shell-payload-grabber
Tool to try to retrieve the java class used as dropper for the RCE in the context of log4shell vulnerability.
Language:Java 3ValtteriL / Detect-Log4Shell
Powershell script to check log files for Log4Shell exploitation
Language:PowerShell 3cyentific-rni / misp-security-playbook-object
This is the workbench for designing and updating the "security-playbook" object template for the MISP project - https://github.com/MISP/misp-objects/blob/main/objects/security-playbook/definition.json
jonasw234 / systeminfo.py
systeminfo command for offline system images
Language:Python 2- Language:Go 1
giadom / Debugging_with_API_Monitor
Debug a sample in Windows using also API Monitor.
SOC-101 / SOC-Introduction
Introduction to SOC and related terminologies.
zam89 / VT_Domain_Checker
Check domain in question to VT
Language:Python 1
