Incident Response Investigation System (IRIS)
A web collaborative platform for incident responders to share technical details during investigations, shipped in Docker containers for easy installation and upgrades.
A web collaborative platform for incident responders to share technical details during investigations, shipped in Docker containers for easy installation and upgrades.
Checked October 2026.
IRIS is a web collaborative platform designed to assist incident responders in sharing technical details during investigations. It consists of two main parts: IrisWeb, the core web application for managing the interface and database, and IrisModules, extensions that allow third parties to process data (e.g., enrich IOCs with MISP and VT, upload EVTX into Splunk).
IRIS can function without modules, but default ones are preinstalled, and additional modules can be configured in the UI under Manage > Modules. The system is shipped in Docker containers for easy installation and upgrades using Docker compose.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Incident Response Investigation System (IRIS): features, pricing and alternatives.
Incident Response Investigation System (IRIS) is a product in the Incident Response category. It covers Evidence Collection and Memory Forensics.
Incident Response Investigation System (IRIS) is free. Download and setup instructions are at https://github.com/dfir-iris/iris-web/.
Alternatives to Incident Response Investigation System (IRIS) listed on CybersecTools:
Compare all Incident Response Investigation System (IRIS) alternatives at https://cybersectools.com/alternatives/incident-response-investigation-system-iris
Incident Response Investigation System (IRIS) is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Highlighter is a FireEye Market app that integrates with FireEye products to provide enhanced cybersecurity capabilities.
HxD is a freeware hex editor and disk editor with advanced features for editing files, memory, and disks.
A command-line tool for extracting data from iOS mobile device backups created by iTunes on macOS systems.
Web-based tool for incident response with easy local installation using Docker.
A tool that reads IP packets from the network or a tcpdump save file and writes an ASCII summary of the packet data.
A declarative language for describing binary data structures that compiles into parsers for multiple programming languages.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,022 products.
Connect your AI
