Security Tools — JATeck Insights

FEATURED

DFIR

Velociraptor

Digital forensics and incident response at scale

Velociraptor is an advanced open-source DFIR framework that provides endpoint visibility, live forensics, and threat hunting capabilities across thousands of endpoints simultaneously. Built on VQL (Velociraptor Query Language), it enables rapid artifact collection and custom detection logic.

WindowsLinuxmacOS

#DFIR#Forensics#Threat Hunting#Endpoint

Free / Open Source

VISIT

FEATURED

NETWORK

Wireshark

The world's foremost network protocol analyzer

Wireshark is the industry-standard network packet analyzer used for troubleshooting, analysis, protocol development, and security research. Supports hundreds of protocols with deep inspection capabilities and a powerful display filter engine.

WindowsLinuxmacOS

#Network#Packet Analysis#Protocol

Free / Open Source

VISIT

FEATURED

MALWARE ANALYSIS

Ghidra

NSA's open-source reverse engineering framework

Ghidra is a free and open-source reverse engineering tool developed by the NSA. It supports analysis of compiled code on a variety of platforms including Windows, macOS, and Linux, with a powerful disassembler, decompiler, and scripting engine.

WindowsLinuxmacOS

#Reverse Engineering#Malware Analysis#Disassembler

Free / Open Source

VISIT

FEATURED

RECON

Nmap

The network mapper — port scanning and service discovery

Nmap is the gold standard for network discovery and security auditing. It rapidly scans large networks, discovers open ports, detects running services and their versions, identifies operating systems, and supports scriptable interaction via the Nmap Scripting Engine (NSE).

WindowsLinuxmacOS

#Recon#Port Scanning#Network Discovery

Free / Open Source

VISIT

FEATURED

OSINT

Maltego

Visual link analysis for OSINT investigations

Maltego is the leading platform for open-source intelligence and graphical link analysis. It aggregates data from hundreds of sources and visualizes relationships between people, companies, domains, IPs, and infrastructure — essential for threat actor attribution and investigation.

WindowsLinuxmacOS

#OSINT#Link Analysis#Threat Intelligence

Free tier / Paid plans from $999/yr

VISIT

FEATURED

VULN SCANNING

Nuclei

Fast, template-based vulnerability scanner

Nuclei is a community-powered vulnerability scanner that uses YAML-based templates to detect security issues across web applications, networks, DNS, and cloud infrastructure. With thousands of community templates and a simple DSL, it enables rapid, customizable scanning at scale.

WindowsLinuxmacOS

#Vuln Scanning#Web Security#Templates

Free / Open Source

VISIT

FEATURED

BLUE TEAM

Elastic SIEM

Open SIEM with ML-powered threat detection

Elastic Security (formerly Elastic SIEM) provides a unified platform for SIEM, endpoint security, and cloud security. Built on the Elastic Stack, it ingests logs at scale, applies ML-based anomaly detection, and ships with hundreds of prebuilt detection rules mapped to MITRE ATT&CK.

WindowsLinuxmacOSCloud

#SIEM#Blue Team#Detection#MITRE ATT&CK

Free tier / Paid from $95/mo

VISIT

FEATURED

BLUE TEAM

MISP

Open-source threat intelligence sharing platform

MISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for sharing, storing, and correlating indicators of compromise, threat intelligence, financial fraud, and vulnerability information. Used by CERTs, ISACs, and security teams worldwide.

Linux

#Threat Intel#IOC Sharing#Blue Team

Free / Open Source

VISIT

FEATURED

OSINT

theHarvester

Email, subdomain, and IP harvesting for recon

theHarvester is a simple but effective OSINT tool for gathering email addresses, subdomains, hosts, employee names, open ports, and banners from different public sources. A staple in every red teamer's initial reconnaissance toolkit.

LinuxmacOS

#OSINT#Recon#Email Harvesting

Free / Open Source

VISIT

FEATURED

DFIR

Volatility 3

Memory forensics framework for incident response

Volatility 3 is the world's most widely used memory forensics framework. It extracts digital artifacts from volatile memory (RAM) dumps, enabling analysts to recover running processes, network connections, registry hives, and malware artifacts that leave no disk footprint.

WindowsLinuxmacOS

#DFIR#Memory Forensics#Malware Analysis

Free / Open Source

VISIT

FEATURED

VULN SCANNING

Burp Suite

The leading web application security testing platform

Burp Suite is the industry-standard toolkit for web application penetration testing. Its intercepting proxy, scanner, intruder, and repeater tools enable manual and automated discovery of SQL injection, XSS, SSRF, authentication flaws, and hundreds of other vulnerability classes.

WindowsLinuxmacOS

#Web Security#Penetration Testing#Proxy

Community (free) / Pro from $449/yr

VISIT

FEATURED

NETWORK

Zeek

Powerful network analysis framework for security monitoring

Zeek (formerly Bro) is an open-source network analysis framework that passively monitors network traffic and generates rich, structured logs of network activity. It is widely deployed in enterprise SOCs for network security monitoring, intrusion detection, and forensic analysis.

LinuxmacOS

#Network#NSM#IDS#Blue Team

Free / Open Source

VISIT

Velociraptor

Wireshark

Ghidra

Nmap

Maltego

Nuclei

Elastic SIEM

MISP

theHarvester

Volatility 3

Burp Suite

Zeek

Submit a tool for review