
TCPViewer
The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run…

PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…

It was developed to speed up the processes of SOC Analysts during analysis

Automation tool designed to simplify the analysis of PCAP (Packet Capture) files

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…


Malcom - Malware Communications Analyzer

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

The Multiplatform Linux Sandbox

Standalone Windows VM malware sandbox running capemon, with GUI triage viewer, YARA signatures, IOC extraction, network analysis, and…

NetworkAssessment: Network Compromise Assessment Tool

Offline AI Security Assistant for Air-Gapped Pentesting

Selective protocol extractor from PCAPs or interfaces

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

Dshell is a network forensic analysis framework.

All-in-One malware analysis tool.