IRA (Incident Response Automation)
Script that isolates a compromised machine's network access during an incident
Desktopfreeglobal
IRA is a command-line incident response tool that isolates a compromised Linux machine by blocking all its network traffic via iptables or nftables, logging the action for later auditing and allowing isolation to be reversed once the threat is handled. It is built for security professionals and system administrators who need to quickly contain a compromised host during an active incident.
Categories
incident responsesecuritynetwork security
Something wrong with this listing — dead link, not a real product, wrong info?

