About this project

This repository is a comprehensive curated list of tools and resources for security incident response (IR) and digital forensics and incident response (DFIR). It covers a wide range of categories including adversary emulation, all-in-one tools, books, communities, disk image creation tools, evidence collection, incident management, knowledge bases, Linux distributions, log analysis tools, memory analysis tools, memory imaging tools, OS X evidence collection, process dump tools, sandboxing/reversing tools, scanner tools, timeline tools, videos, and Windows evidence collection. The list includes both open-source and commercial tools, as well as educational resources like books and videos. It is designed to help security analysts and DFIR teams find the right tools for their incident response needs, from live forensics and memory analysis to log analysis and incident management platforms.