sf

Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, as well as cross-reference them amongst known malware sources. This comes handy when analyzing how sure enough malware species endeavour to communicate amongst the exterior world. What is Malcom? Malcom tin flame assistance you: detect primal command as well as command (C&C) servers understand peer-to-peer networks observe DNS fast-flux infrastructures quickly create upwardly one's heed if a network artifact is 'known-bad' The aim of Malcom is to brand malware analysis as well as intel gathering faster past times providing a human-readable version of network traffic originating from a given host or network. Convert network traffic information to actionable intelligence faster. Check the wiki for a Quickstart amongst closed to dainty screenshots as well as a tutorial on how to add together your ain feeds . If yous demand closed...

ntopng is the side past times side generation version of the master copy ntop, a network traffic probe that monitors network usage. ntopng is based on libpcap as well as it has been written inwards a portable means inwards gild to close run on every Unix platform, MacOSX as well as on Windows as well. ntopng – yes, it’s all lowercase – provides a intuitive, encrypted spider web user interface for the exploration of realtime as well as historical traffic information. Main Features Sort network traffic according to many criteria including IP address, port, L7 protocol, throughput, Autonomous Systems (ASs) Show realtime network traffic and active hosts Produce long-term reports for several network metrics including throughput as well as application protocols Top talkers (senders/receivers), occur ASs, occur L7 applications Monitor as well as written report alive throughput, network as well as application latencies, Round Trip Time (RTT), TCP statisti...

flightsim is a lightweight utility used to generate malicious network traffic in addition to tending safety teams to evaluate safety controls in addition to network visibility. The tool performs tests to copy DNS tunneling, DGA traffic, requests to known active C2 destinations, in addition to other suspicious traffic patterns. Installation Download the latest flightsim binary for your OS from the GitHub Releases page. Alternatively, the utility tin privy hold upward built using Golang inwards whatever surroundings (e.g. Linux, MacOS, Windows), equally follows: go larn -u github.com/alphasoc/flightsim/... Running Network Flight Simulator Upon installation, examination flightsim equally follows: $ flightsim --help AlphaSOC Network Flight Simulator™ (https://github.com/alphasoc/flightsim) flightsim is an application which generates malicious network traffic for safety teams to evaluate safety controls (e.g. firewalls) in addition to ensure that monitoring tools are able ...