How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Dispatch is an incident response orchestration platform that automates the coordination of detection, participant assembly, and task tracking across existing communication and project management tools. It provides a web-configurable state machine to manage incident lifecycle transitions, with template-driven incident models that define types, priorities, and severity levels. The platform enforces role-based access control to map user roles to specific actions and data access, while maintaining a database-backed audit trail of all incident events and system changes for compliance and post-incid
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
The main features of matanolabs/matano are: Security Data Analytics, Security Logging and SIEM, Detection and Alerting Platforms, Forensics and Incident Response, Incident Response Platforms, Security Assessment Tools.
Open-source alternatives to matanolabs/matano include: velocidex/velociraptor — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and… netflix/dispatch — Dispatch is an incident response orchestration platform that automates the coordination of detection, participant… fireeye/silketw. brexhq/substation — Substation is a toolkit for routing, normalizing, and enriching security event and audit logs. dfirkuiper/kuiper — Digital Forensics Investigation Platform. anssi-fr/dfir-o365rc.