
fastnetmon
Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
anomaly-detectionincident-responselog-analysis+5

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

NFStream: a Flexible Network Data Analysis Framework.

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.