Kanvas
Kanvas is an incident response case management tool with a desktop interface built using Python. It provides a unified workspace for investigators to track and document security incidents without switching between multiple applications. The tool is built on the SOD (Spreadsheet of Doom) framework, allowing all data to remain within a spreadsheet for easy distribution and collaboration. It supports multi-user workflows by enabling files to be stored on local machines or shared drives with file locking to prevent editing conflicts. Key features include: - Attack chain visualization for mapping lateral movement - Incident timeline visualization in chronological order - Threat intelligence lookups for IP addresses, domains, file hashes, and CVEs - Ransomware victim verification to check if an organization's data has been published online - MITRE ATT&CK and D3FEND framework mapping - V.E.R.I.S. reporting capabilities - Knowledge management tools including bookmarks, Windows Event ID reference, and Entra ID reference - Built-in Markdown editor for note-taking and documentation - One-click sanitization of sensitive data like domains, URLs, and IP addresses Kanvas is designed to streamline incident response workflows by consolidating essential investigation tools and references into a single application.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Automated Digital Forensics and Incident Response (DFIR) software for rapid incident response and intrusion investigations.
Automatically configure your app to follow OWASP security patterns and principles with Nuxt Security module.
Repository of templates for Ayehu's workflows with the ability to design, execute, and automate IT and business processes.
A framework for accumulating, describing, and classifying actionable Incident Response techniques
Open-source security automation platform for automating security alerts and building AI-assisted workflows.
PlexTrac is a centralized platform for penetration test reporting and threat exposure management that helps security teams streamline assessment workflows, prioritize remediation, and track security posture improvements.
PowerGRR is a PowerShell module for the GRR API, allowing automation and scripting for incident response and remote live forensics.
Web-based tool for incident response with easy local installation using Docker.
Shuffle is a platform for automating security workflows with confidence, offering templates, collaboration tools, and a large app library.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.