packetsifter / packetsifterTool
PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter accepts a pcap as an argument and outputs several files.
☆95Updated 3 years ago
Alternatives and similar repositories for packetsifterTool
Users that are interested in packetsifterTool are comparing it to the libraries listed below
Sorting:
- ☆41Updated last year
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆60Updated 2 years ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆34Updated 3 years ago
- Automatic Sender Policy Framework Reconnaissance☆19Updated 6 years ago
- LLMNR/NBNS/mDNS Spoofing Detection Toolkit☆59Updated 3 years ago
- A simple command line program to help defender test their detections for network beacon patterns and domain fronting☆69Updated 3 years ago
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 3 years ago
- nse script to inject jndi payloads☆46Updated 3 years ago
- Indicator of Compromise Scanner for CVE-2019-19781☆94Updated 5 years ago
- Tool for quickly gathering information from Shodan.io about the number of IPs which satisfy large number of different queries☆49Updated 2 years ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆70Updated last month
- Carbon Black Response IR tool☆53Updated 4 years ago
- ☆38Updated 3 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 4 years ago
- OpenIOC rules to facilitate hunting for indicators of compromise☆37Updated 3 years ago
- gundog - guided hunting in Microsoft Defender☆52Updated 4 years ago
- My conference presentations☆66Updated last year
- THOR MITRE ATT&CK Framework Coverage☆24Updated 4 years ago
- Passive OS detection based on SYN packets without Transmitting any Data☆46Updated 2 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- Automated detection rule analysis utility☆29Updated 2 years ago
- Automatic detection engineering technical state compliance☆55Updated 10 months ago
- ☆80Updated 2 years ago
- Active C2 IoCs☆99Updated 2 years ago
- ☆27Updated 3 years ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆11Updated 4 years ago
- Collection of walkthroughs on various threat hunting techniques☆75Updated 4 years ago
- A list of IOCs applicable to PoshC2☆24Updated 4 years ago
- Wrap any binary into a cached webserver☆53Updated 3 years ago
- Look into EDR events from network☆23Updated last week