Python client for DFIR-IRIS
-
Updated
Aug 19, 2024 - Python
#
dfir-iris
Here are 26 public repositories matching this topic...
(Unofficial) Wazuh integration to send alerts to IRIS.
-
Updated
Jan 1, 2025 - Python
🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS through playbook automation and seamless integrations. Easily extensible and in active development. Join us in building a tool geared towards enhancing security efficiency!
-
Updated
Mar 27, 2024 - Python
Building a complete Open-Source SIEM/SOC stack 🛡️. The stack integrates powerful tools for threat detection, incident response, threat intelligence, and visualization — providing a comprehensive environment for cybersecurity monitoring and analysis.
elasticsearch automation graylog cybersecurity infosec siem elastic shuffle misp grafana-dashboard thehive cortex playbooks wazuh sirp dfir-iris
-
Updated
Nov 27, 2025
SECUBIAN is a French Linux distribution focused on evidence processing during Incident Response.
ansible-playbook suricata elastic sphinx-doc sigma yara volatility glance spiderfoot mvt drawio timesketch notebook-jupyter n8n capa velociraptor libretranslate hayabusa dfir-iris zircolite
-
Updated
Dec 20, 2025 - Python
IRIS module for integration with OpenCTI
-
Updated
Jun 18, 2025 - Python
Open-source Tier 1 SOC analyst training. Real tools, scripted scenarios, Socratic AI tutor. Self-hosted on Docker.
open-source docker-compose incident-response self-hosted educational siem cortex security-training wazuh blue-team cybersecurity-education dfir-iris soc-analyst ai-tutor soc-training tier1-soc
-
Updated
Aug 3, 2026 - Python
CyberFortress-SmartXDR-Core provides the central AI-driven intelligence layer for the CyberFortress Intelligent SOC Ecosystem. It delivers alert triage, IOC enrichment, MITRE mapping, and automated response logic through a unified Flask-based AI gateway.
python flask elasticsearch openai api-rest misp wazuh rag intelowl dfir-iris security-operations-center openxdr
-
Updated
Jan 8, 2026 - Python
iris-smartxdr-module is a IRIS pipeline/processor module created with https://github.com/dfir-iris/iris-skeleton-module
-
Updated
Dec 21, 2025 - Python
SOC automation workflows built with the SOAR Shuffle that coordinates actions between Wazuh, DFIR-IRIS, OpenCTI and Cortex.
-
Updated
Jun 12, 2026
Interactive case data explorer for DFIR-IRIS — standalone Docker service with sortable, filterable DataTables for all case entities and Shadowserver scan data correlation
docker flask datatables incident-response dfir cybersecurity case-management digital-forensics soc threat-intelligence shadowserver dfir-iris
-
Updated
Sep 29, 2026 - Python
iris-misp-pusher is a IRIS pipeline/processor module created with https://github.com/dfir-iris/iris-skeleton-module Copyright 2025, iris-misp-pusher under the License MIT
-
Updated
Dec 21, 2025 - Python
🛡️ AI-augmented Zero Trust SIEM: a working NIST SP 800-207 trust algorithm on Wazuh, n8n and PostgreSQL – threat-intel enrichment, ML log-anomaly scoring, self-adjusting weights, local LLM incident summaries and a Telegram SOC bot, DFIR-IRIS cases, Grafana dashboards, multi-channel alerts and daily reports.
machine-learning grafana postgresql cybersecurity siem security-automation threat-intelligence wazuh anomaly-detection soar zero-trust threat-detection n8n dfir-iris llm ollama soc-automation zero-trust-architecture trust-algorithm nist-800-207
-
Updated
Oct 5, 2026 - Shell
Fully functional, automated SOC built entirely on free, open-source tools
-
Updated
May 23, 2026 - HTML
DFIR-IRIS module to run Cortex Analyzers
-
Updated
Jul 18, 2026 - Python
Add this topic to your repo
To associate your repository with the dfir-iris topic, visit your repo's landing page and select "manage topics."