
plugxdecoder
Decodes PlugX traffic and encrypted/compressed artifacts
digital-forensicsencryption-decryption-toolsforensics+3
3813 years ago

Decodes PlugX traffic and encrypted/compressed artifacts

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic