http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com NetworkMiner packet analyzer 0.91 http://www.secuobs.com/revue/news/163939.shtml http://www.secuobs.com/news/comments111122008-networkminner_passive_forensic_spid.shtml#3852 http://www.secuobs.com/news/comments111122008-networkminner_passive_forensic_spid.shtml#3852 NetworkMiner v0.90 released http://www.secuobs.com/revue/news/159153.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#3675 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#3675 Vidéo : Extract Windows Executables from Packet Captures http://www.secuobs.com/videos/news/7987.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#3142 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#3142 UPDATE NetworkMiner 0.89 http://www.secuobs.com/revue/news/143200.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#3100 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#3100 NetworkMiner v0.88 released http://www.secuobs.com/revue/news/106754.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1838 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1838 Chaosreader: Trace TCP/UDP sessions http://www.secuobs.com/revue/news/106658.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1826 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1826 Vidéo Hak5 : Extract Windows Executables from Packet Captures http://www.secuobs.com/revue/news/95583.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1444 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1444 SniffJoke 0.3 release and request for feedback http://www.secuobs.com/secumail/fdsecumail/msg23802.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1075 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1075 Forensics: Reconstructing Data from Pcap Files http://www.secuobs.com/revue/news/83487.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1074 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#1074 Pulling binaries from pcaps http://www.secuobs.com/revue/news/69635.shtml http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#700 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#700 Xplico is an open source Network Forensic Analysis Tool (NFAT) that allows for data extraction from traffic captures. It supports extraction of mail from POP, IMAP, and SMTP, can extract VoIP streams, etc. http://www.secuobs.com/revue/news/50703.shtml xplico-0.1-imap.tgz http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#444 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#444 http://www.irongeek.com/i.php?page=videos/networkminer-for-network-forensics http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#396 http://www.secuobs.com/news/comments11122008-networkminner_passive_forensic_spid.shtml#396