
zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

Breakdown of a c2-network of chinese beamers - SilentSDK-Analysis

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…


A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

Visualize network topologies and collect graph statistics based on pcap files

create cypher create statements for neo4j out of netstat files from multiple machines

All-in-One malware analysis tool.

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run…

Selective protocol extractor from PCAPs or interfaces