Linux Incident Response alternatives for AI agents.

Collaborative Incident Response platform

Incident Response collection and processing scripts with automated reporting scripts

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

Digging Deeper....

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Cortex: a Powerful Observable Analysis and Active Response Engine

PagerDuty's Incident Response Documentation.

DFIRTrack - The Incident Response Tracking Application

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

This repository started out as a learning in public project for myself and has now become a structured learning map for many in the community. We have 3 years under our belt covering all things DevOps, including Principles, Processes, Tooling and Use Cases surrounding this vast topic.

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

FAME Automates Malware Evaluation

Wazuh - Docker containers

a Docker + Kubernetes network trouble-shooting swiss-army container