Data / Repositories / Incident response
Incident response repositories on GitHub: 8 ranked by stars
8 public repositories tagged Incident response are on GitHub, with 36,979 stars between them; 5 had a push in the last 30 days. Most are written in Python (4), Go (1). The most starred: kubeshark/kubeshark (12,098), meirwah/awesome-incident-response (9,442), A-poc/BlueTeam-Tools (4,524).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| kubeshark/kubeshark | eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard. | Go | 12,098 | 553 | Apache-2.0 | Oct 9 | Oct 14 |
| meirwah/awesome-incident-response | A curated list of tools for incident response | 9,442 | 1,753 | Apache-2.0 | Jul 15 | Oct 11 | |
| A-poc/BlueTeam-Tools | Tools and Techniques for Blue Team / Incident Response | 4,524 | 700 | Aug 23 | Oct 11 | ||
| TracecatHQ/tracecat | Open-source security automation platform for teams and AI agents | Python | 3,836 | 433 | AGPL-3.0 | Oct 14 | Oct 14 |
| HolmesGPT/holmesgpt | SRE Agent - CNCF Sandbox Project | Python | 3,596 | 525 | Apache-2.0 | Oct 14 | Oct 14 |
| danieldurnea/FBI-tools | OSINT Tools for gathering information and actions forensics | 2,700 | 379 | Mar 12, 2025 | Oct 11 | ||
| google/mcp-security | Python | 532 | 146 | Apache-2.0 | Oct 6 | Oct 14 | |
| gensecaihq/Wazuh-MCP-Server | Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001)… | Python | 251 | 65 | MIT | Oct 9 | Oct 14 |
By language
- Python 4
Related topics
- Cybersecurity 4
- Security 4
- MCP 3
- DEVOPS 2
- Kubernetes 2
- Observability 2
- Sre 2
- Awesome list 2
- LLM 2
- Security automation 2
- MCP server 2
- Model Context Protocol 2
Read from GitHub by SpecStream between October 11, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.