Tools and Techniques for Blue Team / Incident Response
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Monzo's real-time incident response and reporting tool ⚡️
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
A concise, directive, specific, flexible, and free incident response plan template
On-Call Assistant for Prometheus Alerts - Get a head start on fixing alerts with AI investigation
An opensource incident management platform integrating with Slack.
Open-source AI copilot that lets you chat with your observability data and code 🧙♂️
Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
Netlify StatusKit is a template to deploy your own Status pages on Netlify.
A curated list of tools for incident response. With repository stars⭐ and forks🍴
Open Source Statuspage Software
First Response Online is a communication and collaboration platform built to support first responders. It lets police officers, fire fighters, and paramedics share critical data with each other in near real-time. It supports iPhone, iPad, and PC and integrates with computer aided dispatch and GPS tracking. Units in the field can update their sta…
Incident Manager Hellper bot aims to orchestrate the process and resolution of incidents, reducing the time spent with manual tasks and ensuring that the necessary steps are fulfilled in the right order. Also, it facilitates the measurement of impact and response rate through metrics.
A collection of awesome tools, software, libraries, learning tutorials & videos, frameworks, best practices and technical resources about Incident Response & Management in Cybersecurity
A collection of hopefully useful document templates for engineering orgs
Add a description, image, and links to the incident topic page so that developers can more easily learn about it.
To associate your repository with the incident topic, visit your repo's landing page and select "manage topics."