INCIDENTS
INCIDENTS is a web-based tool for incident response, similar to TheHive, designed for investigating various security incidents such as malware infections, phishing campaigns, insider abuse, application vulnerabilities, and denial-of-service attempts. It is suitable for SOC, MSSP, incident response firms, or internal detection/response teams. The tool can be easily installed locally using Docker and Docker Compose, with initial user account provisioning and login credentials provided upon installation. Note that email sending isn't configured in the local setup, so 'Forgot my password' feature won't work. Avoid using this setup in a production environment.
FEATURES
ALTERNATIVES
Open-source, free, and scalable cyber threat intelligence and security incident response solution with improved performance and new features.
A collection of AWS security architectures for various security operations.
A custom activity repository for Ayehu NG automation platform, allowing users to create and modify activities to fit their specific needs.
A standardized framework for describing and classifying cybersecurity incidents
Fast Intercept is a security automation platform that empowers users to maximize their existing security products and automate routine tasks.
An open-source, drag-and-drop security workflow builder with integrated case management for automating security workflows and tackling alert fatigue.
Enhances Windows OS security through system modifications and settings adjustments.
Automate security incident handling and facilitate real-time activities of incident handlers.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.