Download Latest Version
Netcap v0.13.0 -- linked hunting evidence source code.zip (316.1 MB)
Add to Preferred Sources
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| checksums.txt | 2026-10-09 | 855 Bytes | |
| netcap-third-party-source-v0.13.0.tar.gz | 2026-10-09 | 225.9 MB | |
| netcap-v0.13.0-linux-amd64-musl.tar.gz | 2026-10-09 | 30.5 MB | |
| netcap-v0.13.0-linux-amd64-libc.tar.gz | 2026-10-09 | 30.5 MB | |
| netcap-nodpi-v0.13.0-darwin-arm64.tar.gz | 2026-10-09 | 33.7 MB | |
| netcap-nodpi-v0.13.0-linux-amd64-libc.tar.gz | 2026-10-09 | 30.5 MB | |
| netcap-nodpi-v0.13.0-linux-amd64-musl.tar.gz | 2026-10-09 | 30.5 MB | |
| netcap-nodpi-v0.13.0-windows-amd64.tar.gz | 2026-10-09 | 35.4 MB | |
| netcap-v0.13.0-darwin-arm64.tar.gz | 2026-10-09 | 33.8 MB | |
| Netcap v0.13.0 -- linked hunting evidence source code.tar.gz | 2026-10-09 | 314.2 MB | |
| Netcap v0.13.0 -- linked hunting evidence source code.zip | 2026-10-09 | 316.1 MB | |
| README.md | 2026-10-09 | 1.4 kB | |
| Totals: 12 Items | 1.1 GB | 5 | |
Hunting evidence
| Feature | Interface / behavior |
|---|---|
| Related evidence | /api/evidence/related, net investigate related, Connections rows and alert details link DNS, connections, protocol records and alerts |
| Verifiable references | References bind to audit-file content hashes; capture interface/VLAN scope and bounded time windows reject ambiguous joins |
| Capture-time DNS context | --dns-resolution-context snapshots matched UDP DNS answers onto Connection observations for rules; names and timestamp overflow are checked |
| Bounded, scoped joins | Per-directory index and result limits report truncation; temporal, interface and VLAN scope checks withhold ambiguous relationships instead of guessing |
| Feature controls | Settings → Features switches evidence linking and network detections independently |
| Alert rendering | Rule alerts without tags render without crashing the Alerts page |
@dreadl0ck/netcap-ui 0.13.0 contains the related-evidence views and feature
controls in cmd/capture/webui/frontend/packages/netcap-ui, published through
GitHub Packages (https://npm.pkg.github.com).
Affected Go packages passed 524 tests. Release archives include macOS ARM64, Windows AMD64 and Linux AMD64 glibc/musl builds, with DPI-enabled and reduced-feature variants, SHA-256 checksums and third-party license sources.
