NFX Detective is a novel Network forensic analysis tool that implements methods for extraction of application content from communication using supported protocols. The implemented functionality includes:
Analysis project management that enables to analyze multiple PCAPs in a single session. Support for large PCAP files, up to GBs.
Advanced visualization using different views of various levels of detail - from overview to detailed information about every single packet.
A collection of parsers and content extraction methods for the most used application protocols. Filtering and full-text search in captured traffic.
NFX Detective is an extensible platform that can be customized to individual requirements:
Possibility to create new extraction modules for other application protocols.
Extension of the system with user defined analytical methods. NFX Detective employs open data model that can be accessed or easily modified.
https://github.com/nesfit/NetfoxDetective
Project Samples
