A curated list of tools for incident response
-
Updated
Jul 18, 2024
#
incident-response-tooling
Here are 63 public repositories matching this topic...
Language: All
Filter by language
Sort: Most stars
Sort options
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
api open-source platform scala rest incident-response orchestration dfir analyzer free misp thehive security-incidents iocs digital-forensics investigations cortex agplv3 incident-management incident-response-tooling
-
Updated
Jul 25, 2025 - Scala
Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
-
Updated
Oct 5, 2023 - JavaScript
DFIRTrack - The Incident Response Tracking Application
-
Updated
Sep 4, 2024 - Python
AWS CloudSaga - Simulate security events in AWS
-
Updated
Oct 16, 2025 - Python
A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.
-
Updated
Oct 4, 2025 - Python
AHA is an incident management & communication framework to provide real-time alert customers when there are active AWS event(s). For customers with AWS Organizations, customers can get aggregated active account level events of all the accounts in the Organization. Customers not using AWS Organizations still benefit alerting at the account level.
-
Updated
Dec 16, 2024 - Python
Open-source AI copilot that lets you chat with your observability data and code 🧙♂️
alerts monitoring metrics incident-response site-reliability-engineering devtools incident hacktoberfest observability contributions-welcome traces aiops first-contributions chatops-ai incident-response-tooling hacktoberfest-accepted oncall-engineers llm hacktoberfest2024 llm-agent
-
Updated
Apr 24, 2025 - TypeScript
RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
security incident-response forensics dfir cybersecurity rdp incident-response-tooling digitalforensics
-
Updated
Sep 3, 2023 - C++
A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️
python osint portable incident-response python3 dfir infosec tkinter-gui tkinter-python osinttool incident-response-tooling osint-python infosec-19 osint-professionals
-
Updated
Oct 18, 2023 - Python
A curated list of tools for incident response. With repository stars⭐ and forks🍴
security list awesome incident-response dfir awesome-list digital-forensics incident incident-management incident-reports incidents incident-response-tooling dfir-automation digitalforensics
-
Updated
Oct 16, 2025
Forensic toolkit for iOS sysdiagnose feature
-
Updated
Oct 13, 2025 - Python
Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes.
linux security incident-response malware intrusion-detection malware-analysis malware-research intrusion-detection-system blueteam incident-response-tooling blueteamin
-
Updated
Jun 11, 2024 - Go
Shodan Monitoring integration for TheHive.
golang security shodan incident-response thehive incident-management security-tools incident-response-tooling
-
Updated
Dec 12, 2024 - Go
PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.
powershell incident-response forensics dfir evidence forensics-investigations incident-response-tooling forensics-tools
-
Updated
Aug 26, 2024 - PowerShell
An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.
python reverse-shell incident-response python-script plugins python3 handlers pentesting python-3 plugin-system red-team socket-programming security-tools end-to-end-encryption red-teaming reverse-shells pentesting-tools incident-response-tooling live-response
-
Updated
Sep 28, 2025 - Python
Linux Incident Response Reporting
python linux incident-response cyber-security incident-management forensics-investigations incident-response-tooling forensics-tools
-
Updated
Mar 15, 2024 - HTML
The DNA test for websites
api cybersecurity cyber-threat-intelligence phishing-detection incident-response-tooling osint-python url-analysis cybersecurity-tool urlscanner urldna
-
Updated
Jun 26, 2025 - Python
A collection of awesome tools, software, libraries, learning tutorials & videos, frameworks, best practices and technical resources about Incident Response & Management in Cybersecurity
alerts splunk incident-response datadog pagerduty on-call incident incident-management splunk-application victorops cybersecurity-incidents incident-response-tooling cybersecurity-education alertsmanager cybersecurity-incident-response incidents-reports
-
Updated
Jan 6, 2023
CLI program for automating the setup, configuration, and use of cybersecurity solutions
-
Updated
Feb 12, 2023 - Python
Improve this page
Add a description, image, and links to the incident-response-tooling topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the incident-response-tooling topic, visit your repo's landing page and select "manage topics."