
Winshark
A wireshark plugin to instrument ETW

A wireshark plugin to instrument ETW

A network packet forensics tool for SSH

Flows-first PCAP TUI (case files, gorgeous UX). Do do do do.

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

A tool for processing a lot of pcaps using tshark

This project is now part of @mitmproxy.

Pcap (capture file) Analysis Toolkit(v.1)

PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…


NetworkAssessment: Network Compromise Assessment Tool

OpenFPC, Open Source Full Packet Capture

Tool for solving BPF filters and crafting packets based on these.

It was developed to speed up the processes of SOC Analysts during analysis

Lua plugin to extract data from Wireshark and convert it into MISP format

Programmable packet inspection engine with NIDS, DNS classification, frequency analysis, and auto-regex generation. Supports Python/Ruby/Java/Lua…

Graph-first network traffic visualizer for live capture and PCAP replay with checkpoint diffing, path tracing, and Wireshark-style display filters…

Automation tool designed to simplify the analysis of PCAP (Packet Capture) files