
arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
defensive-toolsdigital-forensicsforensics+7

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Technical analysis of a multi-stage Adobe Acrobat PDF JavaScript sample, detailing environment triage, Acrobat API abuse, and in-memory payload…

Full analysis of a never documented before Remote Access Trojan linked to Pjoao1578 toolchain

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…