sf

Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection as well as incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files equally disk fills up, as well as provides methods for reading dorsum specific sets of packets speedily as well as easily. It is designed to: Write packets to disk, really speedily ( 10Gbps on multi-core, multi-disk machines) Store equally much history equally it tin (managing disk usage, storing longer durations when traffic slows, as well as thus deleting the oldest packets when it hits disk limits) Read a really pocket-sized per centum (<1%) of packets from disk based on analyst needs It is NOT designed for: Complex packet processing (TCP flow reassembly, etc) It’s fast because it doesn’t practice this.  Even amongst the really minimal, single-pass processing of packets nosotros do, processing 1Gbps for indexing lo...

flightsim is a lightweight utility used to generate malicious network traffic in addition to tending safety teams to evaluate safety controls in addition to network visibility. The tool performs tests to copy DNS tunneling, DGA traffic, requests to known active C2 destinations, in addition to other suspicious traffic patterns. Installation Download the latest flightsim binary for your OS from the GitHub Releases page. Alternatively, the utility tin privy hold upward built using Golang inwards whatever surroundings (e.g. Linux, MacOS, Windows), equally follows: go larn -u github.com/alphasoc/flightsim/... Running Network Flight Simulator Upon installation, examination flightsim equally follows: $ flightsim --help AlphaSOC Network Flight Simulator™ (https://github.com/alphasoc/flightsim) flightsim is an application which generates malicious network traffic for safety teams to evaluate safety controls (e.g. firewalls) in addition to ensure that monitoring tools are able ...