All tags
Catalogue tag

#incident-response

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

45 records
Tagged “incident-response”Ranked by health index
crates.io
69Goodhealth index
SecurityRonin/forensic-vfs
Read-only forensic VFS contracts composing evidence into one positioned-read byte edge — ArchiveOpen · ContainerOpen · VolumeSystemOpen · EncryptionOpen · FileSystemOpen — with recursive PathSpec locators. The contract crate every fleet reader implements.
Rust★ 0↓ 5,690/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
69Goodhealth index
optimuslabs-io/grokpatrol
Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.
Go★ 18Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
67Goodhealth index
Ashfaaq98/ocsf-console-ir
Console-IR. OCSF-native incident response and investigation TUI for the terminal. Triage findings, pivot on indicators, investigate hosts and accounts, GeoIP and WHOIS enrichment, case management, write the report. Single Go binary, SQLite, no server. Open Cybersecurity Schema Framework security tooling for SOC analysts and DFIR.
Go★ 5Sep 19, 2026
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
65Goodhealth index
puck-security/geiger
Detection tells you a key is real; geiger tells you whether it's dangerous.
Go★ 36Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI · npm
63Moderatehealth index
glassflow/tares
The open-source platform for always-on AI agents. Connect anything that emits events; Tares puts every event on one timeline per thing, wakes an agent the moment it matters, and keeps the answer for the next reader. Works with Claude Code, Cursor and your own agents over MCP.
Python · TypeScript★ 17↓ 3,559/moOct 6, 2026
MITOct 6, 2026 · metrics 2.10.0
Go
62Moderatehealth index
ryckakas/crashcause
Explains why a Kubernetes pod crashed: a kubectl plugin and in-cluster controller that turns crashes into 18 stable cause codes for Prometheus, Loki and Grafana.
Go★ 0Oct 12, 2026
Apache-2.0Oct 12, 2026 · metrics 2.10.0
npm
60Moderatehealth index
sifxprime/kodelyth-ecc
70 agents · 196 skills · 102 commands · 22+ hooks · semantic intent routing · self-learning memory · GOD vs EVIL arena · MCP server. Claude Code, Windsurf, Cursor, Codex, Antigravity, Cline, Roo Code, Aider, Kimi, Gemini CLI. MIT.
JavaScript★ 11↓ 8,394/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
59Moderatehealth index
fawdyinc/shellguard
MCP server that gives LLM agents read-only shell access over SSH. Powers Fawdy (fawdy.com)
Go★ 22Sep 24, 2026
Apache-2.0Sep 24, 2026 · metrics 2.10.0
crates.io
57Moderatehealth index
SecurityRonin/state-history-forensic
State-history forensic vocabulary — zero-dependency [H] KNOWLEDGE-tier types and traits lifting each forensic navigation primitive to a time-indexed variant. No deps, no I/O.
Rust★ 0↓ 3,843/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
56Moderatehealth index
TanKimGwan/linmas
Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.
JavaScript★ 2↓ 237/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
—
50Moderatehealth index
GoldenWing-360/claude-security-skills
25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM coding failure modes (slopsquatting, hallucinated APIs, sycophancy), incident response, GDPR/DACH compliance. MIT, battle-tested.
Python★ 19Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
osintph/falconeye
Free self-hosted OSINT investigator's toolkit. Sixteen investigation tools in one interface: crypto tracing, phishing fingerprinting, domain intel, Telegram OSINT, IP reputation, email header forensics with LLM scam detection, username enumeration, HIBP breach checks, ransomware victim tracking. AGPL-3.0.
Python · JavaScript★ 13Sep 17, 2026
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
Root1V/argus-observability-platform
Production-grade observability and agentic AIOps for AI systems — OpenTelemetry-native across independent polyglot apps; GenAI semantic conventions with token/cost attribution; sub-2s detection on a hot path that skips the datastore; LLM agents that find root cause and notify. ClickHouse + Langfuse. 100% self-hosted — no vendor lock-in.
Python★ 0↓ 5,848/moOct 4, 2026
No licenseOct 4, 2026 · metrics 2.10.0
—
26At Riskhealth index
mthcht/ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
PowerShell · HTML · Python★ 673Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
17Criticalhealth index
AlecRandazzo/Packrat
Live system forensic collector
Go★ 16Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0