Forensics & Incident Response OSS tools — 9 tracked with release & CVE alerts

CAPA Mixed open source

The FLARE team's open-source tool to identify capabilities in executable files.

Splunk Attack Range Mixed open source

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

UAC Mixed open source

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

memvid Mixed open source

OSSEC Mixed open source

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Sysmon for Linux Mixed open source

Volatility 3 Mixed open source

Volatility 3.0 development

Plaso Mixed open source

Super timeline all the things

Forensic Artifacts Mixed open source

Digital Forensics Artifact Repository

Tools