AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH2026

Ω / LINKS / METADATA ONLY

DFIR and forensics.

Reviewed project metadata and official links for red, blue, purple, and cross-team security work.

Evidence reviewed 2026-10-11Bounded seed · not an endorsement or a claim of global completeness

This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.

BLUE TEAM

Arkime

Scalable packet capture, indexed search, and network forensics.

DFIR and forensics Network security monitoring Threat hunting

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM

Autopsy

Desktop digital-forensics case analysis and reporting platform.

Case management and reporting DFIR and forensics

Apache-2.0 for Autopsy code; bundled dependencies retain their licenses.
Reviewed Oct 12, 2026

BLUE TEAM

CAPE Sandbox

Isolated automated malware analysis and behavior reporting platform.

DFIR and forensics Malware analysis and reverse engineering Threat intelligence

GPL-3.0
Reviewed Oct 12, 2026

BLUE TEAM

Chainsaw

Windows forensic artifact search and Sigma-backed threat hunting.

Detection engineering DFIR and forensics Threat hunting

GPL-3.0
Reviewed Oct 12, 2026

BLUE TEAM

DFIR-IRIS

Collaborative incident-response case management and reporting.

Case management and reporting DFIR and forensics Incident response

LGPL-3.0
Reviewed Oct 12, 2026

BLUE TEAM

Plaso

Forensic event extraction and super-timeline generation.

Case management and reporting DFIR and forensics

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM

REMnux

Curated malware-analysis Linux distribution and tool environment.

DFIR and forensics Malware analysis and reverse engineering

Composite distribution; every included tool retains its own license.
Reviewed Oct 12, 2026

BLUE TEAM

Timesketch

Collaborative forensic timeline analysis and case exploration.

Case management and reporting DFIR and forensics Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM

Velociraptor

Endpoint collection, DFIR, incident response, and threat hunting platform.

DFIR and forensics Endpoint visibility and EDR Incident response Threat hunting

AGPL-3.0
Reviewed Oct 12, 2026

BLUE TEAM

Volatility 3

Memory-forensics framework for Windows, Linux, and macOS evidence.

DFIR and forensics Malware analysis and reverse engineering

Volatility Software License 1.0.
Reviewed Oct 12, 2026