INCIDENTS
INCIDENTS is a web-based tool for incident response, similar to TheHive, designed for investigating various security incidents such as malware infections, phishing campaigns, insider abuse, application vulnerabilities, and denial-of-service attempts. It is suitable for SOC, MSSP, incident response firms, or internal detection/response teams. The tool can be easily installed locally using Docker and Docker Compose, with initial user account provisioning and login credentials provided upon installation. Note that email sending isn't configured in the local setup, so 'Forgot my password' feature won't work. Avoid using this setup in a production environment.
FEATURES
ALTERNATIVES
WALKOFF is an automation framework for integrating capabilities and devices to streamline tasks.
A set of scripts for collecting forensic data from Windows and Unix systems respecting the order of volatility.
Collection of scripts and resources for DevSecOps, Security Automation and Automated Incident Response Remediation.
Anomali is an AI-Powered Security Operations Platform that delivers speed, scale, and performance at a reduced cost, combining ETL, SIEM, XDR, SOAR, and TIP to detect, investigate, respond, and remediate threats.
Incident response framework focused on remote live forensics
jimi is an orchestration automation tool for multi-team collaboration and automation in IT/Security operations, Development, and CI/CD pipelines.
Scumblr is a web application for periodic syncs of data sources and security analysis to streamline proactive security.
Open-source, free, and scalable cyber threat intelligence and security incident response solution with improved performance and new features.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.