Python client for DFIR-IRIS
-
Updated
Aug 19, 2024 - Python
#
dfir-iris
Here are 22 public repositories matching this topic...
(Unofficial) Wazuh integration to send alerts to IRIS.
-
Updated
Jan 1, 2025 - Python
🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS through playbook automation and seamless integrations. Easily extensible and in active development. Join us in building a tool geared towards enhancing security efficiency!
-
Updated
Mar 27, 2024 - Python
SECUBIAN is a French Linux distribution focused on evidence processing during Incident Response.
ansible-playbook suricata elastic sphinx-doc sigma yara volatility glance spiderfoot mvt drawio timesketch notebook-jupyter n8n capa velociraptor libretranslate hayabusa dfir-iris zircolite
-
Updated
Dec 20, 2025 - Python
IRIS module for integration with OpenCTI
-
Updated
Jun 18, 2025 - Python
Building a complete Open-Source SIEM/SOC stack 🛡️. The stack integrates powerful tools for threat detection, incident response, threat intelligence, and visualization — providing a comprehensive environment for cybersecurity monitoring and analysis.
elasticsearch automation graylog cybersecurity infosec siem elastic shuffle misp grafana-dashboard thehive cortex playbooks wazuh sirp dfir-iris
-
Updated
Nov 27, 2025
Cloned from https://github.com/dfir-iris/iris-web
-
Updated
Dec 13, 2025 - JavaScript
CyberFortress-SmartXDR-Core provides the central AI-driven intelligence layer for the CyberFortress Intelligent SOC Ecosystem. It delivers alert triage, IOC enrichment, MITRE mapping, and automated response logic through a unified Flask-based AI gateway.
python flask elasticsearch openai api-rest misp wazuh rag intelowl dfir-iris security-operations-center openxdr
-
Updated
Jan 8, 2026 - Python
iris-smartxdr-module is a IRIS pipeline/processor module created with https://github.com/dfir-iris/iris-skeleton-module
-
Updated
Dec 21, 2025 - Python
One-command, self-hosted Security Operations Center: installs Wazuh SIEM all-in-one plus 18 linked tools (AI alert triage, threat intel, vuln mgmt, incident response, attack map, CyberChef, SpiderFoot, email forensics) with a single installer and a unified ops wall.
docker incident-response self-hosted dfir cybersecurity siem stix soc vulnerability-management homelab threat-intelligence wazuh blue-team dfir-iris security-operations-center
-
Updated
Jul 7, 2026 - Shell
Interactive case data explorer for DFIR-IRIS — standalone Docker service with sortable, filterable DataTables for all case entities and Shadowserver scan data correlation
docker flask datatables incident-response dfir cybersecurity case-management digital-forensics soc threat-intelligence shadowserver dfir-iris
-
Updated
Feb 16, 2026 - Python
SOC automation workflows built with the SOAR Shuffle that coordinates actions between Wazuh, DFIR-IRIS, OpenCTI and Cortex.
-
Updated
Jun 12, 2026
iris-misp-pusher is a IRIS pipeline/processor module created with https://github.com/dfir-iris/iris-skeleton-module Copyright 2025, iris-misp-pusher under the License MIT
-
Updated
Dec 21, 2025 - Python
Fully functional, automated SOC built entirely on free, open-source tools
-
Updated
May 23, 2026 - HTML
Improve this page
Add a description, image, and links to the dfir-iris topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the dfir-iris topic, visit your repo's landing page and select "manage topics."