sf

Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, as well as cross-reference them amongst known malware sources. This comes handy when analyzing how sure enough malware species endeavour to communicate amongst the exterior world. What is Malcom? Malcom tin flame assistance you: detect primal command as well as command (C&C) servers understand peer-to-peer networks observe DNS fast-flux infrastructures quickly create upwardly one's heed if a network artifact is 'known-bad' The aim of Malcom is to brand malware analysis as well as intel gathering faster past times providing a human-readable version of network traffic originating from a given host or network. Convert network traffic information to actionable intelligence faster. Check the wiki for a Quickstart amongst closed to dainty screenshots as well as a tutorial on how to add together your ain feeds . If yous demand closed...

Kippo is a medium interaction SSH honeypot designed to log brute forcefulness attacks and, well-nigh importantly, the entire rhythm out interaction performed past times the attacker. Kippo is inspired, only non based on Kojoney . Features Some interesting features: Fake filesystem amongst the might to add/remove files. H5N1 amount simulated filesystem resembling a Debian 5.0 installation is included Possibility of adding simulated file contents as well as therefore the assaulter tin give the axe 'cat' files such every bit /etc/passwd. Only minimal file contents are included Session logs stored inwards an UML Compatible format for tardily replay amongst master copy timings Just similar Kojoney, Kippo saves files downloaded amongst wget for afterwards inspection Trickery; ssh pretends to connect somewhere, croak doesn't actually exit, etc Requirements Software required: An operating organization (tested on Debian, CentOS, FreeBSD as well as Windows 7) ...