


A network packet forensics tool for SSH

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

This project is now part of @mitmproxy.

PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…

It was developed to speed up the processes of SOC Analysts during analysis

Analyzes .pcapng files to generate HTML reports for network traffic inspection and forensic review.

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

A tool to analyze the network flow during attack/defence Capture the Flag competitions

OpenFPC, Open Source Full Packet Capture