URLextractor alternatives for AI agents.

Volatility 3.0 development

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

FAME Automates Malware Evaluation

Wazuh - Docker containers

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Digging Deeper....

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

A list of cyber-chef recipes and curated links

Collaborative Incident Response platform

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

Cortex: a Powerful Observable Analysis and Active Response Engine

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

PagerDuty's Incident Response Documentation.

Wazuh - Ansible playbook

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...