We are a security team with 20+ years of ethical hacking, and we've defended over 2 million attacks with Blumira. Ask Us Anything.

• sigma

  13 5,168 10.0 Python

  Generic Signature Format for SIEM Systems

  

  In general I'm going to take the somewhat oppositional standpoint and say that all of these tools are damned similar in the grand scheme of it all. I think if you have the time you're better off implementing Sysmon across your entire Windows environment and utilize Sigma or similar to quickly improve your behavior detections and instead depend on your EDRs to handle known signature-based detections.

• dfirtrack

  1 398 7.8 Python

  DFIRTrack - The Incident Response Tracking Application

  

• SonarLint

  www.sonarlint.org

  sponsored

  Deliver Cleaner and Safer Code - Right in Your IDE of Choice!. SonarLint is a free and open source IDE extension that identifies and catches bugs and vulnerabilities as you code, directly in the IDE. Install from your favorite IDE marketplace today.

  

• TheHive

  11 2,516 8.7 Scala

  TheHive: a Scalable, Open Source and Free Security Incident Response Platform

  

  https://thehive-project.org/ - of course :)

• Wazuh

  50 4,315 9.9 C

  Wazuh - The Open Source Security Platform

  

  https://github.com/wazuh/wazuh - Elastic is a PITA to grow but works well for viz

• grr

  3 4,114 5.8 Python

  GRR Rapid Response: remote live forensics for incident response

  

  https://github.com/google/grr - great as a homegrown agent

• velociraptor

  1 1,264 9.5 Go

  Digging Deeper....

  

  https://github.com/Velocidex/velociraptor - purchased recently but still a great tool

Suggest a related project