Tools and Techniques for Blue Team / Incident Response

Hayabusa (隼はやぶさ) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Monzo's real-time incident response and reporting tool ⚡️

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅ら（ウェラ）

A concise, directive, specific, flexible, and free incident response plan template

SIEM Tactics, Techiques, and Procedures

An opensource incident management platform integrating with Slack.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

On-Call/DevOps Assistant - Get a head start on fixing alerts with AI investigation

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

Netlify StatusKit is a template to deploy your own Status pages on Netlify.

🤖 Cybersecurity Automation & Investigation Assistant

Open source AI on-call developer 🧙‍♂️ Get relevant context & root cause analysis in seconds about production incidents and make on-call engineers 10x better 🏎️

A curated list of tools for incident response. With repository stars⭐ and forks🍴

BlueWave Uptime Monitor application

First Response Online is a communication and collaboration platform built to support first responders. It lets police officers, fire fighters, and paramedics share critical data with each other in near real-time. It supports iPhone, iPad, and PC and integrates with computer aided dispatch and GPS tracking. Units in the field can update their sta…

Open Source Statuspage Software

Incident Manager Hellper bot aims to orchestrate the process and resolution of incidents, reducing the time spent with manual tasks and ensuring that the necessary steps are fulfilled in the right order. Also, it facilitates the measurement of impact and response rate through metrics.

A collection of hopefully useful document templates for engineering orgs