
maltrail
Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…


Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

Behavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC…

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…

A tool for processing a lot of pcaps using tshark

Visualize network topologies and collect graph statistics based on pcap files

Bro analyzer that detects Google's QUIC protocol

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Malcom - Malware Communications Analyzer