ShowMeThePackets

Network analyzer

Tools and resources for network monitoring and analysis used in the SANS SEC503 course

Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/intrusion-detection-in-depth)

GitHub

214 stars
42 watching
43 forks
Language: Jupyter Notebook
last commit: almost 2 years ago

Related projects:

RepositoryDescriptionStars
vadims06/isiswatcherA tool for monitoring and analyzing IS-IS topology changes in network devices.4
xplico/xplicoAnalyzes network traffic data from captured packets to extract and decode specific protocols and information.183
antirez/hpingA network tool for custom TCP/IP packet sending and target reply display1,455
akestoridis/zigatorAnalyzes and manipulates data from Zigbee and Thread networks to identify security vulnerabilities and simulate attacks.29
1an0rmus/tekdefense-automaterAutomates OSINT analysis of IP addresses and hashes by querying multiple data sources535
tomchop/malcomAnalyzes network traffic to detect malware communication and behavior1,158
hatriot/zarpA network attack tool designed to manage and analyze local networks1,449
ivre/masscannedA network responder that provides generic answers to various protocols and applications109
shmohammadi86/netdecodeA tool to decode and analyze network traffic patterns0
schochastics/levelnetAn R package to analyze two-mode networks and extract their binary backbone.9
netflix-skunkworks/diffyAn incident response tool that helps digital forensics teams analyze and prioritize suspicious hosts in cloud environments635
sunwxg/golibwiresharkA Go-based tool for decoding and analyzing network capture files using the libwireshark library.29
vadims06/topolographAn online tool for visualizing and analyzing OSPF/ISIS network topologies180
matthewjdenny/ccasProvides tools for modeling and analyzing communication network data using statistical models.5
netenglabs/suzieqA framework and application for improving network observability by analyzing data from devices across the network.803