UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
A self-hosted dashboard for CrowdSec: investigate alerts, manage decisions, monitor runtime metrics, and send notifications from one responsive UI.
- crowdsec
- crowdsec-lapi
- crowdsec-manager
- dashboard
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
A Go (golang) based Elasticsearch client library.
Digital Forensics Investigation Platform
Tenzir is the data pipeline engine for security teams.
Native, local-first network intelligence for macOS—capture live traffic, inspect PCAP/PCAPNG files, and investigate sessions, protocols, processes, flows, and packet evidence.
Investigate suspicious activity by visualizing Sysmon's event log
A powerful and user-friendly browser extension that streamlines investigations for security professionals.
WebTau (web test automation) is a testing API, command line tool and a framework to write unit, integration and end-to-end tests. Test across REST-API, WebSocket, GraphQL, Browser, Database, CLI and Business Logic with a consistent set of matchers and concepts. REPL mode speeds-up tests development. Rich reporting cuts down investigation time.
A modular Python application to collect intelligence for malicious hosts.
Echo Inspired Stand Alone URL Router
Incident Response - Fast suspicious file finder
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
Self-hosted error tracking on Cloudflare Workers, with OTLP ingestion and MCP tools for investigating errors.
A Python library and command line tools to provide interactive log visualization.
EasyDocker is a TUI focused on investigating and troubleshooting Docker resources. Highly inspired by lazydocker and k9s while leveraging beautiful graphics from BubbleTea
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
A modular Python application to pull intelligence about malicious files
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Practice recognizing chords in this Rust/Yew/Webassembly app
- yew
- music-theory
- music-notation
- wasm
📊 Showcase your open source contributions with beautiful SVG tables. Display your merged PRs from prestigious projects.
Investigating multilingual language models (BERT) by using them for NER in German and English
A patience game written in Rust and Yew