
zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

TCP/IP packet demultiplexer. Download from:

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

Lua plugin to extract data from Wireshark and convert it into MISP format

Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)