Dispatch is an incident response orchestration platform that automates the coordination of detection, participant assembly, and task tracking across existing communication and project management tools. It provides a web-configurable state machine to manage incident lifecycle transitions, with template-driven incident models that define types, priorities, and severity levels. The platform enforces role-based access control to map user roles to specific actions and data access, while maintaining a database-backed audit trail of all incident events and system changes for compliance and post-incid
TheHive is a security incident response platform and multi-tenant case management system. It functions as a Security Orchestration, Automation, and Response (SOAR) tool and a threat intelligence platform designed to coordinate security investigations by managing alerts, cases, and observables. The platform is distinguished by its multi-tenant architecture, which isolates data across different organizations while supporting selective cross-tenant sharing. It features a SOAR automation engine capable of executing sandboxed JavaScript logic to automate workflows and trigger response actions thro
Incident Response Forensic Framework
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
The main features of fox-it/dissect are: Security Information and Event Management, Forensic Frameworks, Incident Response Platforms.
Open-source alternatives to fox-it/dissect include: dfirkuiper/kuiper — Digital Forensics Investigation Platform. netflix/dispatch — Dispatch is an incident response orchestration platform that automates the coordination of detection, participant… thehive-project/thehive — TheHive is a security incident response platform and multi-tenant case management system. It functions as a Security… biggiesmallsag/nighthawkresponse — Incident Response Forensic Framework. coinbase/dexter — Forensics acquisition framework designed to be extensible and secure. certtools/intelmq — IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing…
