🚨 Incident Response Kit

$4.99

Pre-built incident response playbooks and automation scripts for common security events. Collect logs, snapshot system state, capture network connections, and fire alerts — all with one command. Prepare your runbooks before the fire starts.

• One-command system state snapshot (processes, ports, users)
• Log collector: syslog, auth.log, app logs into timestamped bundle
• Network connection capture with geolocation lookup
• Slack and email webhook alerting
• Configurable playbooks (YAML runbooks)
• Evidence bundle creator with chain-of-custody log
• Containment helpers: block IP, kill process, revoke session

# Run full incident snapshot
python respond.py snapshot --output incident-2026-03-14/

# Collect and bundle logs
python respond.py collect-logs --since "2 hours ago"

# Fire Slack alert
python respond.py alert --channel #security --severity HIGH \
  --message "Suspicious login from 1.2.3.4"

Related tools