Network Forensics Collection

◆

◆

◆

◆

🔥Fire

★★

“PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.”

◆

◆

◆

◆

⚙️Steel

★★

“JA4+ is a suite of network fingerprinting standards”

◆

◆

◆

◆

🔮Psychic

★★

“Warning lists to inform users of MISP about potential false-positives or other information in indicators”

◆

◆

◆

◆

🔮Psychic

★★

“Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.”

◆

◆

◆

◆

🔮Psychic

★

“CyberScan: Network's Forensics ToolKit”

◆

◆

◆

◆

🔮Psychic

★

“Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.”

◆

◆

◆

◆

📦Normal

★

“Blackbook of malware domains”

◆

◆

◆

◆

📦Normal

★

“A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University ”

◆

◆

◆

◆

📦Normal

★

“一款专为 CTF 竞赛设计的智能流量分析工具，支持多协议解析与自动化 Flag 提取，助力快速解题。”

◆

◆

◆

◆

📦Normal

★

“Every TCP Proxy Is Detectable With RTT Fingerprinting”

◆

◆

◆

◆

🔮Psychic

★

“Hands-On Network Forensics by Nipun Jaswal”