Autopsy
Open-source digital forensics platform built on The Sleuth Kit.
Security Onion
Free Linux distro for threat hunting and network security monitoring.
Sigma
Generic signature format for SIEM detections, with a large rule library.
Suricata
High-performance open-source IDS/IPS engine.
Velociraptor
Endpoint visibility and DFIR collection tool at scale.
Volatility
Memory forensics framework for analyzing RAM captures.
Wazuh
Open-source SIEM and XDR platform.
Zeek
Network analysis framework producing rich traffic logs.
Get the daily intel picture. The Early Bird™ Intelligence Brief lands in your inbox every morning. Subscribe →