DFIR-IRIS vs Newgen Dynamic Case Management

DFIR-IRIS is an open-source incident response platform for teams conducting investigations in a shared workspace. Case records organize assets, indicators of compromise, tasks, evidence and notes with an audit trail. Alerts from SIEM, EDR, MISP, IntelOwl or REST endpoints can be collected, triaged and promoted into cases. Evidence can be checked with SHA-256, MD5 or SHA-1, while access restrictions and logs cover downloads, views and changes. War rooms provide real-time chat, threads, room-specific teams and slash commands that record decisions and case actions. Configurable Jinja templates generate PDF or DOCX executive summaries, technical reports or court-ready documents. The project lists modules including IrisVT, IrisMISP, IrisCheck and IrisWebHooks, along with a REST API and 162 hook binding points. Permissions include deny-all, read-only and full-access case controls. Docker and Docker Compose are recommended; Linux and macOS are officially supported, while Windows may need Dockerfile changes for file storage paths. Documentation identifies v3.0.0-beta.1 as the current v3 release and says beta versions are not production-ready. The project advises restricting access and not exposing IRIS to the Internet.

Newgen Dynamic Case Management is a web-based case management product for organizing intake, workflows, records, and communications. It includes case intake forms, workflow automation, approval workflows, audit trails, and reporting dashboards. Teams can personalize the system, compose documents, and use API access. AI-assisted classification helps organize case information; retention rules, legal holds, and disposition workflows support records handling. The product also has mobile apps and a hybrid deployment model. Information can be delivered through email, SMS, WhatsApp, print, portals, mobile apps, social channels, web, archive, and FTP. Three editions are listed: Free Trial, Professional Edition, and Enterprise Edition. The trial includes 10 users, 100 GB of storage, and 50,000 API calls per month. Professional Edition includes 100 users, unlimited storage, and 100,000 API calls per month; Enterprise Edition allows unlimited users and storage, with 100,000 API calls per month. Pricing is on request. The maker is headquartered in New Delhi, India, and was founded in 1992.