network-forensics

There are 7 repositories under network-forensics topic.

seladb / PcapPlusPlus
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.
pf-ring dpdk packet-parsing winpcap pcap-files pcap packet-processing cpp libpcap multiplatform linux mac-osx windows networking network-forensics network-tools tcp-reassembly packet-crafting pcapplusplus ebpf
Language:C++ 2652
FoxIO-LLC / ja4
JA4+ is a suite of network fingerprinting standards
cybersecurity ja3 ja3-fingerprint ja4 ja4-fingerprint ja4h ja4x jarm network-analysis network-forensics
Language:Rust 812
MISP / misp-warninglists
Warning lists to inform users of MISP about potential false-positives or other information in indicators
misp network-forensics dfir false-positive threat-intelligence misp-warninglists
Language:Python 502
medbenali / CyberScan
CyberScan: Network's Forensics ToolKit
geolocation information-gathering network-analysis network-forensics network-security network-visualization opensource pcap-analyzer portscanner service-discovery
Language:Python 420
faucetsdn / poseidon
Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.
automation docker faucet hacktoberfest machine-learning network-analysis network-forensics network-monitoring network-traffic network-traffic-capture network-traffic-classification networking pcap pcap-analyzer pcap-files sdn sdn-controller security software-defined-network
Language:Python 417
fkie-cad / friTap
The goal of this project is to help researchers to analyze traffic encapsulated in SSL or TLS.
frida ssl security hooking network-analysis network-forensics android binary-analysis
Language:JavaScript 254
stamparm / blackbook
Blackbook of malware domains
malware-detection network-monitoring network-forensics intrusion-detection domains security threats
213
asiamina / A-Course-on-Digital-Forensics
A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University
courses reverse-engineering memory-forensics network-forensics digital-forensics disk-forensics mobile-forensics
Language:Rich Text Format 170
nipunjaswal / networkforensics
Hands-On Network Forensics by Nipun Jaswal
forensics forensics-investigations network-forensics pcap-analyzer malware-analysis
Language:Python 38
fkie-cad / pcapFS
A FUSE module to mount captured network data
fuse forensics network-forensics pcap pcap-files pcapng
Language:C++ 35
cdpxe / nefias
Network Forensic & Anomaly Detection System; tailored for covert channel/network steganography detection
anomaly-detection network-monitoring network-forensics covert-channels steganography distributed-computing scientific-research scientific-computations network-steganography network-covert-channels information-hiding bash shell shell-scripts linux network networks security information-security infosec
Language:Shell 27
cdpxe / NetworkCovertChannels
Some network covert channel projects of my own research, containing a protocol channel tool (protocol switching covert channel, PCT/PSCC), a protocol hopping covert channel (PHCC) tool, the protocol channel-aware active warden (PCAW) and ... VSTT.
covert-channel steganography secret-sharing information-hiding information-security scientific-software network-security protocol-channels protocol-hopping protocol-switching-covert-channels protocol-hopping-covert-channels infosec network-forensics network-traffic-generator network-science network-analysis network-steganography active warden stego
Language:C 11
MartinaZembjakova / Network-forensic-tools-taxonomy
Overview of some network tools that can be used during the network forensics (extended with some publicly available datasets)
network-forensics network-tools network-dataset overview
Language:HTML 7
fkie-cad / TLExport
The goal of this project is to help researchers/investigaters to export the decrypted TLS content into a PCAP
network-analysis network-forensics pcap pcapng
Language:Python 6
bustaPcap
abaker2010 / bustaPcap
Program for static analysis of pcap files and recreation of information sent
pcap pcap-analyzer pcap-parser pcapng python3 python-3 network-analysis pyshark network-forensics network-tools python
Language:Python 5
Khaoulahidaawi / NIPDS
Designing and implementing a Packet-Based Intelligent Network phishing Intrusion Detection system. The idea of the design is to use machine learning to classify Network packets to benign and phishing in real-time flow (for both http/https protocol) based on DNS records and domain name features. It operates by using a pre-programmed list of known phishing threat features and their indicators of compromise (IOCs). As a signature based INPDS it will monitor the packets traversing the network, it compares these packets to the database of known IOCs or attack signatures to flag any suspicious behavior.
ai dns dns-record http http-server ids intrusion-detection machine-learning-algorithms network network-analysis network-based network-forensics nids phishing phishing-attacks phishing-detection dpkt scapy-library
Language:Jupyter Notebook 4
farazulhoda / network-traffic-analysis
The Network Traffic Analyzer is a Python script designed for capturing and analyzing network traffic, focusing primarily on DNS traffic. This tool provides users with the capability to monitor network activity in real-time and extract relevant information from captured packets.
cybersecurity data-analysis dns-analysis network-analysis network-forensics network-monitoring-tool network-traffic networking-utility open-source packet-sniffer python-scripting python3 scapy-library security-analysis traffic-monitoring whois-lookup
Language:HTML 3
denverskylines / p0f-api-legacy
passive device fingerprinting api for network intrustion detection
network-security network-analysis network-forensics passive-vulnerability-scanner network-intrusion-detection
Language:Python 2
MikeHorn-git / PsqlHunter
Hunt sql commands in pcap.
forensics network-forensics pcap sql pyshark python threat-hunting sqlinjection
Language:Python 2
rhacrsse / AutomIoT
IoT Forensics Master Thesis @PoliMi
android android-studio antlab automiot executive-summary ezviz-lb1 ezviz-t31 feature-sniffer iot-forensics labeled-data linksys-wrt3200acm master-thesis network-dataset network-forensics politecnico-di-milano smart-home tapo-l530e tapo-p100 uiautomator uiautomatorviewer
Language:Jupyter Notebook 2
shivnshu / network-forensics-framework
Usable web interface to perform offline network analysis
network-analysis network-forensics django-application
Language:JavaScript 2
axmahr / PcapCleaner
Filter background traffic from capture files
filtering network-forensics pcap pcapng
Language:Python 1
B4K35 / SIT327-Network-Forensics-Lab
This repository was designed to help streamline the process of completing the Deakin unit SIT327 Network Forensics.
deakin network-forensics sit327
Language:Shell 1
Baniur / Writeups
Write-ups for CTF-like, CyberSec training platforms (BTLO, CyberDefenders, Hack The Box Sherlocks)
blue-team-labs-online btlo ctf-challenges ctf-investigations ctf-labs cyberdefenders cybersecurity digital-forensics hack-the-box hack-the-box-sherlocks htb incident-response malware-analysis network-forensics reverse-engineering threat-hunting threat-intel
1
johnbumgarner / forensics_tools
This repository contains various scripts that can be used to obtain information about IP addresses and MAC addresses.
cyber-forensics cybersecurity digitial-forensics forensic-tools forensics-investigations network-forensics
Language:Python 1
lucadibello / wiremap-public
🛰️ A sophisticated network mapper and analyser
network-analysis network-forensics network-security
0
MichalSoltysikSOC / Cybersecurity-content-videos
Cybersecurity content (YouTube videos) | (1) Deep packet inspection analyses - why the typical approach is not enough | (2) Deep Packet Inspection Analysis - Examining One Packet Killers | (3) Remcos RAT threat analysis on Windows including IEC 60870-5-104 traffic
deep-packet-inspection dpi network-forensics rdt round-trip round-trip-delay-time round-trip-time rtt rtt-calculation rtt-measurement rtt-measurements wireshark deep-packet-inspection-analyses deep-packet-inspection-analysis network-security wireshark-capture wireshark-cheatsheet wireshark-cheat-sheet remcos
0
Baniur / baniur.github.io
Write-ups for CTF-like, CyberSec training platforms (BTLO, CyberDefenders) | Repository of forensic artifacts which are useful in real world and CTF investigations
cybersecurity digital-forensics incident-response malware-analysis network-forensics reverse-engineering threat-hunting threat-intelligence threatintel endpoint-forensics blue-team-labs-online btlo ctf-challenges ctf-writeups cyberdefenders ctf-investigations hack-the-box htb htb-writeups hack-the-box-sherlocks
bolisettynihith / Intro-Network-Forensics-challenges
Contains beginner-level network forensics challenges from various CTFs.
network-forensics pcap-files
computerforensicslab / honeypots
NETWORK FORENSICS: 25 different honeypots in a single pypi package! (dns, ftp, httpproxy, http, https, imap, mysql, pop3, postgres, redis, smb, smtp, socks5, ssh, telnet, vnc, mssql, elastic, ldap, ntp, memcache, snmp, oracle, sip and irc)
honey-pots honeypots network-forensics network-security
Language:Python
githubfoam / moloch-sandbox
network security monitoring visibility , ELK, CTI, DFIR
moloch elk network-monitoring elasticsearch logstash kibana network-forensics pcap
Language:Shell
githubfoam / tshark-githubactions
tshark network forensics ubuntu
tshark network-forensics ubuntu
githubfoam / tshark-sandbox
tshark network forensics ubuntu windows
tshark ubuntu windows network-forensics
Language:Shell
IvanLetteri / MLfeaturesExtractor
machine-learning cybersecurity artificial-intelligence network-forensics
Language:Python

network-forensics

seladb / PcapPlusPlus

FoxIO-LLC / ja4

MISP / misp-warninglists

medbenali / CyberScan

faucetsdn / poseidon

fkie-cad / friTap

stamparm / blackbook

asiamina / A-Course-on-Digital-Forensics

nipunjaswal / networkforensics

fkie-cad / pcapFS

cdpxe / nefias

cdpxe / NetworkCovertChannels

MartinaZembjakova / Network-forensic-tools-taxonomy

fkie-cad / TLExport

abaker2010 / bustaPcap

Khaoulahidaawi / NIPDS

farazulhoda / network-traffic-analysis

denverskylines / p0f-api-legacy

MikeHorn-git / PsqlHunter

rhacrsse / AutomIoT

shivnshu / network-forensics-framework

axmahr / PcapCleaner

B4K35 / SIT327-Network-Forensics-Lab

Baniur / Writeups

johnbumgarner / forensics_tools

lucadibello / wiremap-public

MichalSoltysikSOC / Cybersecurity-content-videos

Baniur / baniur.github.io

bolisettynihith / Intro-Network-Forensics-challenges

computerforensicslab / honeypots

githubfoam / moloch-sandbox

githubfoam / tshark-githubactions

githubfoam / tshark-sandbox

IvanLetteri / MLfeaturesExtractor