news
Best Free and Open Source Software
-
Dissect – digital forensics and incident response framework
Dissect is a digital forensics and incident response framework developed by Fox-IT, part of NCC Group. It provides a consistent interface for accessing forensic evidence even when the underlying disk images, file systems and operating systems differ substantially.
Rather than requiring an examiner to manually extract files from evidence containers, mount file systems and pass individual artefacts through separate utilities, Dissect abstracts many of these layers behind a common target model. Its command-line tools can therefore query forensic evidence directly while the framework handles the underlying formats.
The main Dissect repository acts as a meta package bringing together the compatible components of the wider modular framework.
This is free and open source software.
5 Best Free and Open Source Threat Intelligence Platforms
They are aimed mainly at security operations centres, incident response teams, threat hunters, malware analysts, researchers, and organisations that need to understand emerging threats and investigate suspicious activity. They can also help teams collaborate by linking related information and maintaining a structured record of previous investigations.
The free and open source platforms covered here approach the problem from different angles. Some concentrate on sharing and correlating threat intelligence between organisations, while others build rich knowledge graphs that connect indicators, actors, campaigns, and techniques. There are also platforms focused on investigation and enrichment, automatically querying multiple external sources to add useful context to indicators. Others provide a simpler way to monitor intelligence feeds and identify changes that may warrant closer attention.
Together, they cover much of the threat intelligence workflow, from collecting raw information through enrichment and correlation to investigation, sharing, and ongoing monitoring.
Here’s our verdict captured in a legendary LinuxLinks-style ratings chart. Only free and open source software is eligible for inclusion.
L0p4Map – network monitoring and visualization tool
L0p4Map is a graphical network monitoring and visualization application aimed at security researchers and network administrators. It combines network discovery, scanning and topology analysis in a modern PyQt6 interface.
The software uses established networking tools and protocols to provide detailed visibility into local and routed networks. Nmap handles deeper scanning operations, while L0p4Map adds network mapping, device classification, continuous monitoring and interactive analysis around the results. It can also monitor ARP and mDNS traffic to detect newly appearing devices.
This is free and open source software.
Rat Zsh – fast and reproducible Zsh plugin manager
Rat Zsh is a plugin manager for Zsh that emphasizes reproducible configuration and predictable plugin loading. Its configuration is stored in TOML, allowing the complete plugin set and relevant loading information to be kept in an ordinary text file.
Repository synchronization can run in parallel, while initialization generates the shell code required to load the configured plugins. It also understands the distinction between files that should be sourced and directories that should be added to Zsh’s function path.
This approach provides more explicit control than plugin managers which infer most behaviour automatically.
This is free and open source software.