#1IR playbooks, triage, case management, evidence collection, and incident management tools.
Kitploit recommended

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…

A low to medium interaction honeypot.

VirusTotal Wanna Be - Now with 100% more Hipster

Kernel-Mode Rootkit Hunter

HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be…

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

Easy-to-use live forensics toolbox for Linux endpoints

An advanced memory forensics framework

Distributed alerting for the masses!