AiSOC alternatives for AI agents.

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

AssemblyLine 4: File triage and malware analysis

Volatility 3.0 development

Collaborative Incident Response platform

Wazuh - Docker containers

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.

A collection of resources for Threat Hunters

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

FAME Automates Malware Evaluation

Digging Deeper....

Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taking, automated data linking, interactive visualizations, and robust access control. Enhance your CTI workflow from analysis to reporting—all in one secure space.