Incident response and threat intelligence teams often face a paradox: vast information but no structured way to manage cases, tasks, and collaboration, leading to duplication, silos, and delays.
FlowIntel, an open-source case and task management platform, solves this by giving analysts a modern environment with Markdown notes, templating, subtasks, attachments, and timeline views to turn fragmented work into structured investigations. Case templating allow to reproduce process and facilitate the work of the DFIR analyst. It also integrates natively with MISP, allowing direct linkage of threat intelligence, enrichment with events, use of taxonomies and galaxies, and export of structured reports.

Presentation slides