
Dshell
Dshell is a network forensic analysis framework.
digital-forensicsdns-analysisforensics+3

Dshell is a network forensic analysis framework.

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.


Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

Passive-recursive DNS daemon that logs all DNS queries and responses, enabling network visibility, EDR/IR log enrichment, and passive DNS data…