


Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

A network sniffer that logs all DNS server replies for use in a passive DNS setup

JA4+ is a suite of network fingerprinting standards

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…

It was developed to speed up the processes of SOC Analysts during analysis

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

NetworkAssessment: Network Compromise Assessment Tool

A cross platform http sniffer with a web UI


A tool to assist with network-based hunting for GRU's Drovorub malware c2

A network packet forensics tool for SSH

Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap…