incidentresponse 开源项目推荐（24 个）

atc-project /atomic-threat-coverage

Actionable analytics designed to combat threats

r3nzsec /irflow-timeline

macOS 的 DFIR 时间线分析——基于 SQLite 支持的查看器，适用于 CSV、TSV、XLSX、EVTX、PLASO、$MFT 和 $J 文件，支持 AI 工件、AI 秘密狩猎、进程检查、横向移动跟踪、持久性检测和 VirusTotal 丰富功能。

AndrewRathbun /VanillaWindowsReference

A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!

respondnow /respondnow

Open Source Incident Management tool for the cloud native ecosystem

w8mej /InfoSec-Blueprints

Essential playbooks & runbooks for cybersecurity operations. A dynamic resource for security pros to navigate digital threats, with best practices, incident management protocols, and community-driven updates. Elevate your security strategy and response with our AI-driven guides.

vibraniumlabs /vibe-oncall

AI-native incident response and on-call platform. PagerDuty and Opsgenie alternative for modern SRE and DevOps teams.

DevVj-1 /Blue-Team-Cyber-Investigation-Tools-and-Tricks

Blue 🧿 Team Welcome to the Blue Team Cyber Investigation Tricks and Tools repository! This collection of resources is designed to aid cybersecurity professionals in defending and securing their networks. Whether you're a seasoned analyst or just getting started, you'll find valuable tools, techniques, and best practices here to enhance you

mym0us3r /WAZUH-Process-Tree-Viewer

A forensic visualization tool for Wazuh that transforms Windows process creation logs (Event ID 4688) into interactive, draggable relationship graphs. Optimized for Threat Hunting and Incident Response.

f3nr1rs3c /ThreatLens

Incident Response (IR) ve tehdit tespiti odaklı optimize edilmiş bir Sysmon konfigürasyonu içerir.

dfirvault /DFIRVault

Tools to support DFIR investigations

SyedShaheerHussain /File-Type-Identifier_V1_GUI_Python

Identifies real file types via binary signatures (Magic Numbers) to uncover hidden extensions, detect masqueraded malware, and mitigate phishing vectors.

Projects-Developer /Top-10-Malware-Detection-Projects

Top 10 Malware detection projects focus on developing systems and techniques to identify and mitigate malicious software (malware) that can compromise the security of computer systems. Includes Source Code, PPT, Synopsis, Report, Documents, Base Research Paper & Video tutorials

samjoy26 /IOC-Navigator

Simplifies the process of gathering information about Indicators of Compromise

TempleAnthony /Deloitte-Australia-Cyber-Job-Simulation-On-Web-Log-Analysis

• Completed a job simulation involving reading web activity logs • Supported a client in a cyber security breach • Answered questions to identify suspicious user activity

zam89 /VT_Domain_Checker

Check domain in question to VT

jarif87 /logsentinel-advanced-threat-log-analyzer

Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.

thelocalh0st /thelocalh0st.github.io

A walkthrough site made with jekyll in which you can see the writeups for HackTheBox and Tryhackme challenges , CTF's , machines and many more!

Kalyx1111 /ShdGuard

ShdGuard is a passive defensive monitor for detecting suspicious activity on a PC and attributing incidents to attacker IPs. It monitors botnet C2 connections, open ports, inbound connections, Temp-folder programs and failed logons, with evidence sealing, reputation enrichment and optional phone alerts.

MADx00 /CBTaskBulker

该项目在 GitHub 上没有填写描述

mauricelambert /DiskAnalyzer

This package implements multiples libraries and tools to parse, analyze and extract informations from disk on the live system.