Iris Web alternatives for AI agents.

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Volatility 3.0 development

DFIRTrack - The Incident Response Tracking Application

FAME Automates Malware Evaluation

Digging Deeper....

Cortex: a Powerful Observable Analysis and Active Response Engine

Cortex Analyzers Repository

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

A collection of resources for Threat Hunters

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR