
DFIR-IRIS
8.2#3 in case management softwareFree planFree planWebAPILinuxmacOS
Visit
| Fact | DFIR-IRIS | Persimmony Case Management |
|---|---|---|
| Collaboration | War rooms provide real-time chat, threads, per-room teams and slash commands that record decisions and case actions. | Features include real-time case sharing, supervisor review and approval workflows, granular permissions, team scheduling, and alerts. |
| Deployment | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. | cloud |
| Founded | 2019 | 2002 |
| Integrations | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. | Persimmony says its API can connect the product with EHRs, scheduling systems, and other critical systems. |
| Purpose | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. | Persimmony Case Management brings client documentation and interactions together for public health, social services, and healthcare organizations. |
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.
It suits government agencies and nonprofits working in public health, social services, and healthcare. Organizations needing program-specific workflows, shared case oversight, and client communication tools may find its features relevant.