Network Forensics Python Packages

fritap

Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

netforensicai

Local-first, open-source DFIR investigation platform. Correlates pcap, JSON/CSV and Windows EVTX/Sysmon evidence into one traceable timeline, entity graph and evidence-cited findings - with offline detection rules, MITRE ATT&CK mapping, a local web UI, live capture, and an optional AI assistant that cannot fabricate citations.

route-explain

Inspect the route Linux selects for a flow and the rules and tables behind it.

dftk

Evidence-preserving digital forensics primitives and composable workflows for analysts, automation systems, and autonomous agents.

poseidon-core

Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.

poseidon-cli

Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.

poseidon-api

Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.

aurasniff

Interactive CLI network packet analyzer with Gemini, Claude, and GPT-4o AI — no Wireshark needed

tlexport

The goal of this project is to help researchers/investigaters to export the decrypted TLS content into a PCAP

cyberscan

CyberScan: Network's Forensics ToolKit

aegis-devin

AI autonomous penetration testing + network forensics platform. Groq-powered, 100% free. One command full pentest

cyberscanai

AI Agent Tool for Penetration Testing and Network Forensics