The aim of this repository is to provide a list of examples of tools, sources and measures available to incident response teams
☆65Jul 15, 2020Updated 6 years ago
Alternatives and similar repositories for IRtools
Users that are interested in IRtools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository hosts files relating to the TF-CSIRT Reference Security Incident Taxonomy Working Group.☆81May 13, 2026Updated 5 months ago
- Napkin is a simple tool to produce statistical analysis of a text☆12Feb 25, 2024Updated 2 years ago
- A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…☆24Dec 11, 2023Updated 2 years ago
- ☆31Mar 3, 2021Updated 5 years ago
- CyCAT.org API back-end server including crawlers☆29Feb 4, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…☆16Aug 24, 2022Updated 4 years ago
- simple scripts which fetch CIDR blocks by country code and add them to iptables/ipset blocklists☆11Dec 2, 2025Updated 11 months ago
- ☆16Apr 30, 2024Updated 2 years ago
- A Java library for programmatically calculating OWASP Risk Rating scores☆20Apr 3, 2023Updated 3 years ago
- STIX 2.1 Data Modeling Tool☆27Jul 2, 2024Updated 2 years ago
- Passive DNS Common Output Format☆39Aug 30, 2024Updated 2 years ago
- A set of tools for collecting forensic information☆28Apr 4, 2020Updated 6 years ago
- A curated list of tools for incident response☆35Mar 2, 2024Updated 2 years ago
- A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding …☆38Nov 4, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Nov 18, 2019Updated 6 years ago
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆40Jul 20, 2026Updated 3 months ago
- An elevated STIX representation of the MITRE ATT&CK Groups knowledge base☆24May 23, 2022Updated 4 years ago
- OASIS CACAO TC: Official repository for work of the CACAO TC https://github.com/oasis-tcs/cacao☆39Jan 16, 2024Updated 2 years ago
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- Detection Engineering research, open-source tools, conference presentations, and technical publications shared with the security communit…☆28Dec 17, 2025Updated 10 months ago
- Python client and module for Vulnerability-Lookup.☆20Oct 14, 2026Updated 2 weeks ago
- AIL project training materials☆40Oct 22, 2026Updated last week
- Generator of regular expressions☆15Apr 11, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CyCAT.org taxonomies☆15May 22, 2021Updated 5 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆24Jan 31, 2024Updated 2 years ago
- Easy way to create a MISP event related to a Phishing page☆17May 31, 2023Updated 3 years ago
- Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core"☆15May 15, 2024Updated 2 years ago
- Tries to get and parse .well-known/security.txt from a domain☆12Updated this week
- An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange☆40Oct 21, 2026Updated last week
- Open Source testing framework for image correlation, distance and analysis☆44May 2, 2023Updated 3 years ago
- ☆12Updated this week
- D4 core software client in Go☆11Apr 19, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a dedicated maturity framework to empower your team. Inspired by industry …☆51Jun 3, 2026Updated 5 months ago
- This repository is a curated list of pro bono incident response entities.☆21Jun 21, 2023Updated 3 years ago
- A CTI program management and production platform built around MISP☆51Updated this week
- YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.☆27Dec 14, 2021Updated 4 years ago
- Rust implementation of the DCSO Bloom filter☆29Jul 15, 2025Updated last year
- Advisories, guidance, best practice documents and more issued by members of the EU CSIRTs network, a network composed of EU Member States…☆132Updated this week
- Import AbuseCH IOC Feeds into MISP☆12Feb 17, 2021Updated 5 years ago