Free Security Operations StackStorm is an open-source automation platform that connects and automates DevOps workflows and integrates with existing infrastructure.
Free Security Operations Sample security playbooks for security automation, orchestration and response (SOAR) using Microsoft Sentinel trigger
Free Security Operations Migrated Splunk SOAR Connectors to new GitHub organization for better organization and management.
Free Security Operations A project that uses Athena and EventBridge to investigate API activity and notify of actions for incident response and misconfiguration detection.
Free Security Operations A collection of incident response methodologies for various security incidents, providing easy-to-use operational best practices.
Free Security Operations AWS Community repository of custom Config rules with instructions for leveraging and developing AWS Config Rules.
Free Security Operations A remediation orchestration platform that consolidates security alerts, automates triage, and streamlines the remediation process across hybrid environments.
Free Security Operations A public incident response process documentation used at PagerDuty
Free Security Operations Collection of scripts and resources for DevSecOps, Security Automation and Automated Incident Response Remediation.
Free Security Operations A data curation platform that automates security data collection, transformation and routing while reducing data volume and infrastructure costs.
Free Security Operations A proof of concept for using the SSM Agent in Fargate for incident response
Free Security Operations Scalable, cost-effective application recovery to AWS.
Free Security Operations A DFIR console integrating various cybersecurity tools and frameworks for efficient incident response.
Free Security Operations Detect signed malware and track stolen code-signing certificates using osquery.
Free Security Operations DFIRTrack is an open source web application focused on incident response for handling major incidents with many affected systems, tracking system status, tasks, and artifacts.
Free Security Operations A defense-in-depth security automation and monitoring framework utilizing threat intelligence, machine learning, and serverless technologies.
Free Security Operations An AI-powered security operations platform that automates alert investigation, triage, and response workflows for SOC analysts.
Free Security Operations CimSweep is a suite of CIM/WMI-based tools for incident response and hunting operations on Windows systems without the need to deploy an agent.
Free Security Operations A web collaborative platform for incident responders to share technical details during investigations, shipped in Docker containers for easy installation and upgrades.
Free Security Operations A Serverless Security Orchestration Automation and Response (SOAR) Framework for AWS GuardDuty with various supported actions.
Free Security Operations Fast suspicious file finder for threat hunting and live forensics.
Free Security Operations Repository of playbooks, scripts, and templates for automating and orchestrating Security Operations.
Free Security Operations StackStorm is an open-source automation platform that connects and automates DevOps workflows and integrates with existing infrastructure.
Free Security Operations A collection of Cyber Incident Response Playbook Battle Cards (PBC) for combating cyber threats and attacks, following a prescriptive approach inspired by CERT Societe Generale's IRM.
