Tag Archives: Network Forensic Analysis Tool

PortExpert – Monitor Applications Connected to Internet

PortExpert gives you a detailed vision of your personnal computer cybersecurity.

Moloch – PCAP capturing, Indexing and Database System

Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access.

PcapXray – A Network Forensics Tool

PcapXray is a Network Forensics Tool that allow user to visualize a Packet Capture offline as a Network Diagram

Xplico – Network Forensic Analysis Tool

Network artifact collection is extremely important when you are looking to investigate a security intrusion reported by external entity such as ISP, CERT or CSIRT. Network evidence may include network logs, network pcap files and the source IP these are