Incident Response Python Packages

volatility3

Volatility 3.0 development

cortexutils

Cortex Analyzers Repository

tenzir

Tenzir CLI bindings and binary launchers

projectair

Project AIR: forensic reconstruction and incident response for AI agents. Signed AgDR decision records, OWASP ASI01-ASI10 detection, signed forensic evidence exports.

gitgalaxy

An AST-free, LLM-free heuristic knowledge graph engine for deep repository intelligence. Map, secure, and modernize enterprise codebases across 50+ languages at extreme velocity

cortex4py

Python API Client for Cortex

firefighter-incident

FireFighter is an incident management application, designed to work in Slack, and more.

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

apiosintds

On demand query API for https://github.com/davidonzo/Threat-Intel project.

chickadee

Yet another GeoIP resolution tool.

bedrock-keys-security

Detect phantom IAM users, decode leaked AWS Bedrock API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

pyvast

A security telemetry engine for detection and response

luminaut

Casting light on shadow cloud deployments

quell

An on-call engineer that never sleeps.

resq-mcp

FastMCP server exposing ResQ platform capabilities to AI clients

django-incident-response

A real-time incident response and reporting tool

lerc-control

A client to help with live response activities

ransomwatch

Ransomware Intelligence Tool - Designed for threat intelligence, security research, and situational awareness

forioccrawler

A forensic ioc crawler and parser.

agent-cooking-cli

Evidence-first workflow CLI for agents: generate a workspace, collect auditable artifacts, and drive triage/design/product decisions without chat-memory.

sem-emergency-stop

Quickly stop all Google Ads advertising

intelmqmail

IntelMQ command line tool to process events and send out email notifications.

phishsage

PhishSage is a lightweight email triage and phishing-analysis toolkit. Extracts headers, attachments, and links, applies heuristic checks, and produces structured insights.

pytenzir

A security telemetry engine for detection and response