This project consists of two components: Library Bundles the code used to read PCAPs. Can be used within MapReduce jobs to natively read PCAP files. Implements a Hive Serializer/Deserializer (SerDe) to query PCAPs using SQL like commands. See: https://github.com/RIPE-NCC/hadoop-pcap/tree/master/hadoop-pcap-lib See: https://github.com/RIPE-NCC/hadoop-pcap/tree/master/hadoop-pcap-serde
FEATURES
ALTERNATIVES
A Digital Bond research project to enumerate ICS applications and devices
replayproxy allows you to 're-live' a HTTP session captured in a .pcap file, parsing HTTP streams, caching them, and starting a HTTP proxy to reply to requests with matching responses.
A honeypot that emulates a Belkin N300 Home Wireless router with default setup to observe traffic
A low interaction Python honeypot designed to mimic various services and ports to attract attackers and log access attempts.
JARM is a TLS server fingerprinting tool used for identifying server configurations and malicious infrastructure.
High-performance packet capture library with zero copy functionality.
netsniff-ng is a free Linux networking toolkit with zero-copy mechanisms for network development, analysis, and auditing.
Snort is an open source intrusion prevention system that uses rules to detect and prevent malicious network activity.
PINNED

InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.

Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.