
arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project


Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

privacy-first, open-source and free idevice management tool written in Rust and Qt

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Free access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Collecting & Hunting for IOCs with gusto and style

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interesting relations…

CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

Python-based malware analysis sandbox that integrates with Sysinternals Procmon to automatically collect, analyze, and report runtime indicators with…

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…