Incident Response for Evidence Collection
Incident Response tools for Evidence Collection: the Incident Response options most relevant when Evidence Collection is the priority, compared side by side so you can shortlist faster. Filter by pricing or specialization. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
We cover 15 cybersecurity tools
FEATURED
USE CASES
A standardized framework for describing and classifying cybersecurity incidents
AI platform for incident response: timeline automation, reporting & team sync.
An HTTP proxy, monitor, and reverse proxy tool for viewing HTTP and SSL/HTTPS traffic.
Modern digital forensics and incident response platform with comprehensive tools.
Web-based tool for incident response with easy local installation using Docker.
A Live Response collection script for Incident Response that automates the collection of artifacts from various Unix-like operating systems.
PowerGRR is a PowerShell API client library that automates GRR (Google Rapid Response) operations for digital forensics and incident response across multiple operating systems.
A PHP based web application for managing postmortems with pluggable features.
DFIRTrack is an open source web application focused on incident response for handling major incidents with many affected systems, tracking system status, tasks, and artifacts.
A web collaborative platform for incident responders to share technical details during investigations, shipped in Docker containers for easy installation and upgrades.
A modular incident response framework in Powershell that uses Powershell Remoting to collect data for incident response and breach hunts.
A framework/scripting tool to standardize and simplify the process of scripting favorite Live Acquisition utilities for Incident Responders.
Request Tracker for Incident Response (RTIR) is a tool for incident response teams to manage incident reports, correlate data, and facilitate communication.
