network-forensics

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.

Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.

🔮 Visibility Across Space and Time – The network telemetry engine for data-driven security investigations.

CyberScan: Network's Forensics ToolKit

Warning lists to inform users of MISP about potential false-positives or other information in indicators

Blackbook of malware domains

A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University

A FUSE module to mount captured network data

Network Forensic & Anomaly Detection System; tailored for covert channel/network steganography detection

Hands-On Network Forensics by Nipun Jaswal

🔒🌀Sites for Begginers to learn Cyber Hacking and Security🔒🌀

Some network covert channel projects of my own research, containing a protocol channel tool (protocol switching covert channel, PCT/PSCC), a protocol hopping covert channel (PHCC) tool, the protocol channel-aware active warden (PCAW) and ... VSTT.

Overview of some network tools that can be used during the network forensics (extended with some publicly available datasets)

Usable web interface to perform offline network analysis

A ML-based network forensics utility for gaining further insight into past attacks

Snippets for Palo Alto Networks Minemeld Project

Contains beginner-level network forensics challenges from various CTFs.

network security monitoring visibility , ELK, CTI, DFIR

passive device fingerprinting api for network intrustion detection

Program for static analysis of pcap files and recreation of information sent

Transform MISP warninglists to plaintext format