WARNING: the program is still in development and not stable even though it's on version 1.x.y. Use at your own risk.* Clinv DevSecOps command line asset inventory Help See documentation for more details. Installing pip install clinv Contributing For guidance on setting up a development environment, and how to make a contribution to clinv, see Contributing to clinv. Donations or If you are using some of my open-source tools, have enjoyed them, and want to say "thanks", this is a very strong way to do it. If your product/company depends on these tools, you can sponsor me to ensure I keep happily maintaining them. If these tools are helping you save money, time, effort, or frustrations; or they are helping you make money, be more productive, efficient, secure, enjoy a bit more your work, or get your product ready faster, this is a great way to show your appreciation. Thanks for that! And by sponsoring me, you are helping make these tools, that already help you, sustainable and healthy. License GPLv3
FEATURES
ALTERNATIVES
A Sysmon configuration file template with detailed explanations and tutorial-like features.
Dispatch helps manage security incidents by integrating with existing tools and automating incident response tasks.
Repository of default playbooks and custom functions for Splunk SOAR instances with content migration to Splunk's GitHub.
A DFIR Playbook Spec based on YAML for collaborative incident response processes.
A DFIR console integrating various cybersecurity tools and frameworks for efficient incident response.
TheHive is a case management platform for security operations teams that facilitates incident response, threat analysis, and team collaboration.
Open-source security automation platform for automating security alerts and building AI-assisted workflows.
Detect signed malware and track stolen code-signing certificates using osquery.
PINNED

InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.

Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.