Search Results for "networkminer"

The MERCENARY Linux Distro is Built specifically for Cyber Hunt Team Operators. This is the first iteration of this distro, with several tools, including Mercenary Hunt Framework being added with the next release (Early 2017). This Distro contains the most well known and respected forensic tools all conveniently installed on one system. Tools included are: mercenary hunt framework(**soon), Powershell, OMI, SIFT, wmic, winexe, radare2, viper, pescanner, jsdetox, volatility, maltrieve,...

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows that can detect the OS, hostname and open ports of network hosts through packet sniffing or by parsing a PCAP file. NetworkMiner can also extract transmitted files from network traffic. New versions of NetworkMiner are released exclusively on www.netresec.com since version 2.0 of NetworkMiner.

Splits large PCAP files into multiple files with one TCP or UDP session per file. SplitCap is a command line tool developed in .NET. The packet parsing library in SplitCap comes from NetworkMiner. SplitCap can also filter large PCAPs on port or IP.

...It attempts to demonstrate how Wireshark's powerful network traffic analysis capabilities can be combined with the file carving capabilities of programs such as Foremost and NetworkMiner in a manner that is portable and extensible (hence the choice of Perl). Hopefully Wireshark project may eventually choose to incorporate some of these features such as automated TCP/UDP session extraction, an interface to a scripting engine such as Python which can be used to add modular units for file carving, and ability to export network activity in easily-readable diagram format.