Blackbook of malware domains

The goal of this project is to help researchers to analyze traffic encapsulated in SSL or TLS.

A FUSE module to mount captured network data

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

Cybersecurity content (YouTube videos) | (1) Deep packet inspection analyses - why the typical approach is not enough | (2) Deep Packet Inspection Analysis - Examining One Packet Killers | (3) Remcos RAT threat analysis on Windows including IEC 60870-5-104 traffic

Warning lists to inform users of MISP about potential false-positives or other information in indicators

Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.

The goal of this project is to help researchers/investigaters to export the decrypted TLS content into a PCAP

JA4+ is a suite of network fingerprinting standards

Hunt sql commands in pcap.

This repository was designed to help streamline the process of completing the Deakin unit SIT327 Network Forensics.

Write-ups for CTF-like, CyberSec training platforms (BTLO, CyberDefenders) | Repository of forensic artifacts which are useful in real world and CTF investigations

Network Forensic & Anomaly Detection System; tailored for covert channel/network steganography detection

Write-ups for CTF-like, CyberSec training platforms (BTLO, CyberDefenders, Hack The Box Sherlocks)

Filter background traffic from capture files

The Network Traffic Analyzer is a Python script designed for capturing and analyzing network traffic, focusing primarily on DNS traffic. This tool provides users with the capability to monitor network activity in real-time and extract relevant information from captured packets.

IoT Forensics Master Thesis @POLIMI

NETWORK FORENSICS: 25 different honeypots in a single pypi package! (dns, ftp, httpproxy, http, https, imap, mysql, pop3, postgres, redis, smb, smtp, socks5, ssh, telnet, vnc, mssql, elastic, ldap, ntp, memcache, snmp, oracle, sip and irc)

🛰️ A sophisticated network mapper and analyser

A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University