
ndff
A flow-based network monitor with Deep Packet Inspection

A flow-based network monitor with Deep Packet Inspection

A tool to assist with network-based hunting for GRU's Drovorub malware c2

Bro analyzer that detects Google's QUIC protocol

A Zeek IPSec protocol analyzer based on Spicy.

A Zeek Wireguard protocol analyzer based on Spicy.

A Zeek OSPF packet analyzer based on Spicy.

Selective protocol extractor from PCAPs or interfaces

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…


Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…