#1IR playbooks, triage, case management, evidence collection, and incident management tools.
Kitploit recommended
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
hasherezade/hollows_hunterScans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory…
mrwadams/attackgenAttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK…
neo23x0/auditdBest Practice Auditd Configuration
abrignoni/aleappAndroid Logs Events And Protobuf Parser
kevthehermit/ratdecodersPython Decoders for Common Remote Access Trojans
gosecure/pyrdpRDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
brandon7cc/mac-monitorAdvanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…
target/strelkaReal-time, container-based file scanning at enterprise scale
gamelinux/passivednsA network sniffer that logs all DNS server replies for use in a passive DNS setup
securitytemplates/sectemplatesOpen source templates you can use to bootstrap your security programs
tirrenotechnologies/tirrenoOpen-source security framework for real-time event tracking, threat detection, and risk scoring. Monitors user behavior, detects fraud, bot attacks,…
withsecurelabs/doublepulsar-detection-scriptA python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
emalderson/thephishThePhish: an automated phishing email analysis tool
kubeshop/botkubeAn app that helps you monitor your Kubernetes cluster, debug critical deployments & gives recommendations for standard practices
cisco-ai-defense/defenseclawSecurity Governance for Agentic AI
rfxn/linux-malware-detectMulti-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…
