
zeek-mercury-npf
Zeek plugin generating Mercury NPF fingerprints for TCP, TLS/DTLS, QUIC, HTTP, SSH, OpenVPN, and STUN to support network security monitoring.
defensive-toolsnetwork-securitypacket-sniffing-analysis

Zeek plugin generating Mercury NPF fingerprints for TCP, TLS/DTLS, QUIC, HTTP, SSH, OpenVPN, and STUN to support network security monitoring.
A Zeek OpenVPN protocol analyzer plugin.

Wireshark plugin for dissecting the Telegram protocol


A wireshark plugin to instrument ETW

Lua plugin to extract data from Wireshark and convert it into MISP format

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…