UAC automates forensic artefact collection from Linux and other Unix-like systems with portable, profile-driven incident response workflows.
Read more
Tag: incident response
Dissect – digital forensics and incident response framework
Dissect is a Python digital forensics and incident response framework for analysing forensic artefacts across disk, file system and OS formats.
Read more
5 Best Free and Open Source Threat Intelligence Platforms
Discover the best free and open source threat intelligence platforms for collecting, enriching, analysing and sharing cyber threat data.
Read more
IntelOwl – threat intelligence enrichment and analysis platform
IntelOwl enriches files and observables through modular analysers, connectors, playbooks, investigations and a REST API for security teams.
Read more
11 Best Free and Open Source Incident Response Tools
Incident response tools enable you to respond to critical issues before they impact your business. We recommend open source solutions.
Read more
Shuffle – security orchestration and automation platform
Shuffle is a security orchestration and automation platform designed for security teams and managed security service providers.
Read more
DFIR-IRIS – collaborative incident response platform
IRIS is a collaborative incident response platform designed to help security teams manage investigations and share technical information.
Read more
Keep – AIOps and alert management platform
Keep is an AIOps and alert management platform that consolidates alerts and incidents from monitoring and observability tools.
Read more
OneUptime – self-hosted observability and incident management platform
OneUptime is a self-hosted observability and incident management platform.
Read more
FastFinder – threat hunting and forensic triage tool
FastFinder investigates suspicious files on Linux using hashes, YARA rules, memory inspection, continuous monitoring and event forwarding.
Read more
FIR – cybersecurity incident management platform
FIR (Fast Incident Response) is an cybersecurity incident management platform designed with agility and speed in mind.
Read more
Velociraptor – endpoint visibility and collection tool
Velociraptor is an advanced digital forensic and incident response tool that enhances your visibility into your endpoints.
Read more
Iris – flexible service for paging and messaging
Iris is the automated incident paging system at LinkedIn. Iris is free and open source software written in Python and JavaScript.
Read more
GoAlert – on-call scheduling, automated escalations and notifications
GoAlert provides on-call scheduling, automated escalations and notifications (like SMS or voice calls).
Read more
Dispatch – manage security incidents by deeply integrating with existing tools
Dispatch helps effectively manage security incidents by deeply integrating with existing tools used throughout an organization.
Read more
Alertmanager – handles alerts sent by client applications
The Alertmanager handles alerts sent by client applications such as the Prometheus server.
Read more
Cabot – monitoring and alerts service
Cabot is a self-hosted infrastructure monitoring platform that provides features of PagerDuty, Server Density, Pingdom and Nagios.
Read more