Incident Response
Showing 13 of 193 projects
A Windows incident response tool that generates comprehensive system reports without requiring admin permissions.
A PowerShell module for targeted containment and remediation during incident response, enabling remote cleanup of malware artifacts.
A forensic tool that parses Java Cache IDX files to extract malware download history and binary data for incident response.
An extended traceroute wrapper for CSIRT/CERT operators that displays abuse contacts, BGP rankings, RBL entries, and geolocation data.
A client-minion tool for consistent and safe capture of off-network web resources during security investigations.
A simple Docker honeypot server that emulates parts of the Docker HTTP API to detect and log reconnaissance and container creation attempts.
A multithreaded YARA scanner that applies many rules to many files for incident response and malware analysis.
A Python DNS crawler that finds identical domain names across different TLDs by querying authoritative SOA records.
A modular, medium-interaction honeypot built with Python and Twisted for detecting and analyzing cyber attacks.
A minimal honeypot that detects unauthorized connection attempts and triggers customizable alerts.
A Python-based OpenIOC editor for creating and managing threat intelligence indicators across multiple security systems.
A fast security scanner that detects the Shai Hulud 2.0 npm supply chain attack by checking for malicious files, hashes, and compromised packages.
A simple web tool to scan files against YARA rules for detecting suspicious indicators.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.