Incident Response

prismorsec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…

mthcht/awesome-lists

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

fleetdm/fleet

Open-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

backbay-labs/hush

Portable security rules for the action boundary of AI agents

google/turbinia

Automation and Scaling of Digital Forensics Tools

magicsword-io/loldrivers

Curated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…

winsiderss/systeminformer

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

netalertx/netalertx

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

corelight/ecs-logstash-mappings

Mapping Corelight or Zeek data to Elastic Common Schema logs

grafana/loki

Horizontally scalable, multi-tenant log aggregation system that indexes labels instead of full text, integrates with Grafana, and is optimized for…

pnwcomputers/ultimate-cybersecurity-master-guide

This repository provides a centralized resource for operational cyber defense and offense, compiling Theory, Tools, Operating Procedures, and…

abrignoni/ileapp

Parses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…

yeti-platform/yeti

Your Everyday Threat Intelligence

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

inverse-inc/packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…