meirwah/awesome-incident-response resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

9353 stars · 1736 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A curated awesome-list of tools and resources for security incident response and digital forensics (DFIR). It organizes links across categories like evidence collection, memory analysis, log analysis, adversary emulation, and playbooks.

Use cases

• find tools for incident response
• build a DFIR toolkit
• learn digital forensics and incident response
• find memory forensics tools
• find evidence collection tools for Windows and Linux
• prepare an incident response playbook

When to choose

• you need a vetted directory of DFIR tools rather than a single tool
• you are a security analyst assembling an incident response capability
• you want to discover tools across many DFIR categories in one place

When to avoid

• you need an actual incident response tool rather than a list of links
• you expect runnable software or documentation from this repo itself
• you need a step-by-step incident response methodology rather than tool discovery

Facets

learning-resource · maturity active

security developer-tools security awesome-lists penetration-testing cross-platform incident-response dfir curated-list forensics cybersecurity

Member repositories

For agents

markdown · JSON · MCP: product_card(name="meirwah/awesome-incident-response")