NLADC/dissector

DDoS botnet research and indicators of compromise from Nokia Deepfield ERT

packet captures of real-world ddos attacks

Dshell is a network forensic analysis framework.

🔍 AI-assisted threat-hunting workbench for SOC and DFIR analysts — turns raw PCAPs into actionable intel with a Zeek + tshark pipeline, C2/beacon detection, JA3 fingerprinting, MITRE ATT&CK mapping, OSINT enrichment, and multilingual reports from local or cloud LLMs.

Network traffic analysis tool for Attack & Defense CTF's

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

AI assistant for wireshark

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods

Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio).