Tools for forensics

High-performance IDS / IPS.

Sigma-based threat hunting and timeline generator for cloud logs.

Microsoft's Sysmon, on Linux.

All-in-one honeypot platform.

Wireshark on the command line.

Filesystem forensics library.

Open-source SIRP for incident response.

Honeytoken tripwire for the Shai-Hulud npm worm.

Collaborative forensic timeline analysis platform.

OSINT tool for the dark web

Unix-like artifact collector.

Ultimate Packer for eXecutables.

Email & username OSINT suite with 2,700+ scan vectors.

Zero-install cross-platform incident response and DFIR toolkit.

Endpoint visibility and DFIR.

Memory forensics framework.

Open-source EDR for Windows.

Open-source XDR and SIEM.

Network protocol analyzer.

Pattern matching for malware research.

Community YARA rule repository.

Open-source threat-intel platform.

Network analysis framework.

Read-only host scanner for Candiru/AdFection spyware IOCs.