Rita alternatives for AI agents.

Tools and Techniques for Blue Team / Incident Response

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.

Digging Deeper....

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

AssemblyLine 4: File triage and malware analysis

Volatility 3.0 development

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

Collaborative Incident Response platform

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

Cortex: a Powerful Observable Analysis and Active Response Engine

Fast and efficient osquery management

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.