# cyb3rfox/Aurora-Incident-Response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

Repository: https://github.com/cyb3rfox/Aurora-Incident-Response
Canonical: https://ross.abutalabs.com/products/aurora-incident-response
Language: JavaScript
License: Apache-2.0
License Family: permissive
Topics: incident-response, incident-management, incident-response-tooling
Last push: 2023-10-05T18:43:26+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2276, "days_push": 1063, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1078, forks 130 (observed 2026-08-28T04:03:29.787490+00:00)

## What it is
A cross-platform Electron desktop application for documenting incident response investigations. It digitizes the SANS FOR508 'Spreadsheet of Doom' to help responders track findings, tasks, lateral movement, and timelines while producing reports.

## Use cases
- track findings and tasks during an incident response investigation
- visualize lateral movement paths in a security incident
- build a visual timeline of attacker activity
- generate incident response reports from case notes
- replace spreadsheets for DFIR case management

## When to choose
- you are an incident responder managing a DFIR case and need structured documentation
- you want a free, offline desktop tool for tracking investigation findings and timelines
- you want to move beyond ad-hoc spreadsheets for incident documentation

## When to avoid
- you need a team-based, server-backed incident management platform with multi-user collaboration
- you need automated evidence collection or SIEM-style alerting rather than manual documentation
- you require a mobile-first solution, as tablet support is not yet available

## Facets
- artifact type: application
- maturity: maintenance
- function: developer-tools, documentation
- domain: security, developer-tools
- platform: windows, cross-platform
- tags: incident-response, dfir, case-management, forensics, electron-app, linux, macos, electron

## Member repositories
- cyb3rfox/Aurora-Incident-Response (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:29.787490+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:53:08.466065+00:00, confidence not recorded.
  - readme: https://github.com/cyb3rfox/Aurora-Incident-Response (fetched 2026-08-28T04:03:29.787490+00:00, sha ed51fa84eb72)
- Data as of 2026-08-30T08:39:29.467469+00:00.