GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client (agent) that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation: Please visit our documentation website if you want to know more about GRR. Contact Us: GitHub issues - github.com/google/grr/issues, GRR Users mailing list, Follow us on Twitter for announcements of GRR user meetups. We use a Gitter chat room during meetups. Screenshots
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A compilation of suggested tools for each component in a detection and response pipeline, with real-world examples, to design effective threat detection and response pipelines.
Shuffle is a platform for automating security workflows with confidence, offering templates, collaboration tools, and a large app library.
SOARCA is an open-source SOAR platform that automates security incident response workflows using standardized CACAOv2 playbooks and multiple integration interfaces.
JIMI is a flow-based orchestration automation platform that combines low-code and no-code capabilities for multi-team collaboration across IT, security, and development operations.
Automated Digital Forensics and Incident Response (DFIR) software for rapid incident response and intrusion investigations.
Shuffle Automation provides an open-source platform for security orchestration, automation, and response.
A community repository of workflow templates for the Ayehu NG platform that enables automated IT and business process execution.
Incident response and case management solution for efficient incident response and management.
Open-source security automation platform for automating security alerts and building AI-assisted workflows.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.