Dshell

Dshell Un marco extensible de análisis forense de redes. Permite el desarrollo rápido de plugins para apoyar la disección de capturas de paquetes de red. Características clave: Análisis profundo de paquetes usando plugins especializados Reensamblaje robusto de flujos Soporte para IPv4 e IPv6...

CIRTKit - Tools For The Computer Incident Response Team

One DFIR console to rule them all. Built on top of theViper Framework Documentation Please see the wiki for more information about CIRTKit and documentation Roadmap Future integrations Bit9 Palo Alto Networks EnCase/FTK Future modules Packet Analysis possibly Dshell Javascript...

Army Research Lab Releases Dshell Forensics Framework

The U.S. Army has released to open source an internal forensics analysis framework that the Army Research Lab has been using for some time. The framework, known as Dshell, is a Python tool that runs on Linux and its designed to help analysts investigate compromises within their environments. The...