Awesome Cybersecurity Blue Team
Section: IR management consoles · Cybersecurity incident management platform allowing for easy creation, tracking, and reporting of cybersecurity incidents.
StaleScore 53
Entry
Fast Incident Response (FIR)
Appears in 5 awesome lists
Cybersecurity incident management platform designed with agility and speed in mind. It allows for easy creation, tracking, and reporting of cybersecurity incidents and is useful for CSIRTs, CERTs and SOCs alike.
Open github.comcertsocietegenerale/fir
Found in these lists
Awesome Cybersecurity Blue Team - CN
Section: 事件响应管理平台 · 一个网络安全事件管理平台，可以轻松创建，跟踪和报告网络安全事件
StaleScore 47
Awesome Incident Response
Section: Incident Management · Cybersecurity incident management platform designed with agility and speed in mind. It allows for easy creation, tracking, and reporting of cybersecurity incidents and is useful for CSIRTs, CERTs and SOCs alike.
ActiveScore 82
Awesome Security
Section: Security Information & Event Management · Fast Incident Response, a cybersecurity incident management platform.
SlowScore 70
Security lists for SOC/DFIR detections
Section: General
FreshScore 84
Often listed next to it
Rekall
Open source tool (and library) for the extraction of digital artifacts from volatile memory (RAM) samples.
In 4 lists
threat_note
Web application built by Defense Point Security to allow security researchers the ability to add and retrieve indicators related to their research.
In 3 lists
TheHive
可扩展的免费安全事件响应平台，旨在简化与SOC，CSIRT和CERT的交互，并与MISP紧密集成。; 补充; SOC：Security operations center，安全管理/运营中心; CSIRT：Computer Security Incident Response Team，计算机安全入侵事件响应小组，偏溯源; CERT：Computer Emergency Response Team，计算机应急响应中心/小组，偏指挥; MISP：Malware Information Sharing Platform，威胁情报共享平台，偏情报
In 3 lists
DFTimewolf
Framework for orchestrating forensic collection, processing and data export using GRR and Rekall
In 2 lists
Sandia Cyber Omni Tracker (SCOT)
Incident Response collaboration and knowledge capture tool focused on flexibility and ease of use. Our goal is to add value to the incident response process without burdening the user.
Zenduty
Zenduty is a novel incident management platform providing end-to-end incident alerting, on-call management and response orchestration, giving teams greater control and automation over the incident management lifecycle.
DFIRTrack
Incident Response tracking application handling one or more incidents via cases and tasks with a lot of affected systems and artifacts.
Shuffle
A general purpose security automation platform focused on accessibility.