ja4
foxio-llc/ja4JA4+ is a suite of network fingerprinting standards
dns-analysisencryption-decryption-toolsfingerprint-spoofing+9
foxio-llc/ja4JA4+ is a suite of network fingerprinting standards
sepinf-inc/ipedIPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
simsong/bulk_extractorThis is the development tree. Production downloads are at:
idaholab/malcolmMalcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…
p1sec/qcsuperQCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
srixivas/pcapxray❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…
medbenali/cyberscanOpen-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…
emrekybs/bryobioIt was developed to speed up the processes of SOC Analysts during analysis
emrekybs/bluefishAutomation tool designed to simplify the analysis of PCAP (Packet Capture) files
kiminewt/pysharkPython wrapper for tshark, allowing python packet parsing using wireshark dissectors
microsoft/etl2pcapngUtility that converts an .etl file containing a Windows network packet capture into .pcapng format.
halildeniz/networkassessmentNetworkAssessment: Network Compromise Assessment Tool
gamelinux/passivednsA network sniffer that logs all DNS server replies for use in a passive DNS setup
mspicer/pcapinatorA tool for processing a lot of pcaps using tshark
z4l4mi/ipgeoExtracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.