Cortex Analyzers alternatives for AI agents.

Cortex: a Powerful Observable Analysis and Active Response Engine

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Collaborative Incident Response platform

DFIRTrack - The Incident Response Tracking Application

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Digging Deeper....

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

Volatility 3.0 development

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Digital Forensics Investigation Platform

A collection of resources for Threat Hunters

FAME Automates Malware Evaluation