
DFIR-IRIS
8.2#3 in case management softwareFree planFree planWebAPILinuxmacOS
Visit
| Fact | DFIR-IRIS | Sumac Case Management |
|---|---|---|
| Case management | Cases contain assets, IOCs, tasks, evidence and notes with severity, ownership, status and audit history. | Included features include client profiles and intake, case lifecycle tracking, service delivery planning, communication tracking, workflows, reminders, and outcome reporting. |
| Deployment | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. | hybrid |
| Free plan | Yes | No |
| Integrations | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. | The vendor lists integrations including QuickBooks Online, Sage, FreshBooks, Mailchimp, Constant Contact, Google Calendar, and Gmail; it also says it works with iATS and Stripe and, in limited capacities, PayPal and Moneris. |
| Purpose | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. | Sumac is customizable case management software designed for nonprofits and human and social service organizations. |
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.
Sumac is aimed at community nonprofits and human and social service organizations, including those working in housing, food security, family services, survivor support, disability services and settlement. It may suit teams that need case tracking alongside optional fundraising or volunteer tools.