Python client for DFIR-IRIS
-
Updated
Aug 19, 2024 - Python
#
dfir-iris
Here are 25 public repositories matching this topic...
(Unofficial) Wazuh integration to send alerts to IRIS.
-
Updated
Jan 1, 2025 - Python
🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS through playbook automation and seamless integrations. Easily extensible and in active development. Join us in building a tool geared towards enhancing security efficiency!
-
Updated
Mar 27, 2024 - Python
Building a complete Open-Source SIEM/SOC stack 🛡️. The stack integrates powerful tools for threat detection, incident response, threat intelligence, and visualization — providing a comprehensive environment for cybersecurity monitoring and analysis.
elasticsearch automation graylog cybersecurity infosec siem elastic shuffle misp grafana-dashboard thehive cortex playbooks wazuh sirp dfir-iris
-
Updated
Nov 27, 2025
SECUBIAN is a French Linux distribution focused on evidence processing during Incident Response.
ansible-playbook suricata elastic sphinx-doc sigma yara volatility glance spiderfoot mvt drawio timesketch notebook-jupyter n8n capa velociraptor libretranslate hayabusa dfir-iris zircolite
-
Updated
Dec 20, 2025 - Python
IRIS module for integration with OpenCTI
-
Updated
Jun 18, 2025 - Python
CyberFortress-SmartXDR-Core provides the central AI-driven intelligence layer for the CyberFortress Intelligent SOC Ecosystem. It delivers alert triage, IOC enrichment, MITRE mapping, and automated response logic through a unified Flask-based AI gateway.
python flask elasticsearch openai api-rest misp wazuh rag intelowl dfir-iris security-operations-center openxdr
-
Updated
Jan 8, 2026 - Python
iris-smartxdr-module is a IRIS pipeline/processor module created with https://github.com/dfir-iris/iris-skeleton-module
-
Updated
Dec 21, 2025 - Python
Interactive case data explorer for DFIR-IRIS — standalone Docker service with sortable, filterable DataTables for all case entities and Shadowserver scan data correlation
docker flask datatables incident-response dfir cybersecurity case-management digital-forensics soc threat-intelligence shadowserver dfir-iris
-
Updated
Feb 16, 2026 - Python
SOC automation workflows built with the SOAR Shuffle that coordinates actions between Wazuh, DFIR-IRIS, OpenCTI and Cortex.
-
Updated
Jun 12, 2026
Open-source Tier 1 SOC analyst training. Real tools, scripted scenarios, Socratic AI tutor. Self-hosted on Docker.
open-source docker-compose incident-response self-hosted educational siem cortex security-training wazuh blue-team cybersecurity-education dfir-iris soc-analyst ai-tutor soc-training tier1-soc
-
Updated
Aug 3, 2026 - Python
iris-misp-pusher is a IRIS pipeline/processor module created with https://github.com/dfir-iris/iris-skeleton-module Copyright 2025, iris-misp-pusher under the License MIT
-
Updated
Dec 21, 2025 - Python
DFIR-IRIS module to run Cortex Mailer Responder
-
Updated
Jul 18, 2026 - Python
Home SOC with integrated alert-driven forensic automation, reports, evidence, and defense presentation.
incident-response cybersecurity suricata misp digital-forensics cortex soc wazuh mitre-attack dfir-iris
-
Updated
Aug 4, 2026 - Shell
Add this topic to your repo
To associate your repository with the dfir-iris topic, visit your repo's landing page and select "manage topics."