Incident Response

Atlas

Awesome Lists

• st0pp3r/awesome-soc-analyst

Templates

• Shift Handover Template
• Simple User Clarification Message
• Simple Case Summary Template
• Phishing Case Summary Template
• Risky User Template

Tools

• Online Lookup
  • DomainTools Whois Lookup
  • MxToolbox Lookup Tool
  • AbuseIPDB
  • ipstack
  • ASN Lookup
  • VirusTotal Search
  • FOFA Search Engine
  • Google Admin Toolbox
  • GreyNoise
  • Qualys SSL Labs
  • urlscan.io
  • Browser Extension Lookup
  • Windows Files
    • WTFBins
    • xCyclopedia
    • EchoTrail
  • Malware Family
    • Malpedia
    • Objective-See’s Mac Malware Collection
• Sandbox / Detonation Chamber
  • ANY.RUN
  • Hybrid Analysis
• Parsers / Beautifiers
  • CyberChef
  • JSDetox
• File Analysis
  • Compiler Explorer
  • Decompiler Explorer
  • Assembler Simulator
  • oletools
  • peepdf
  • XLMMacroDeobfuscator
• Certificates
  • Certstream

---

Relevant Note(s): Defensive Security Digital Forensics