To avoid those issues, cloud-focused security teams often rely on logs. Historically, collecting and analyzing packets in cloud environments was a complex, time-consuming, manual process that often involved using multiple tools. PolarProxy decrypts and re-encrypts TLS traffic, while also saving the decrypted traffic in a PCAP file.Packet capture plays a vital role in forensic investigation, incident response, and threat hunting, but it hasn't always translated easily to security use cases in cloud environments. PolarProxy is primarily designed to intercept and decrypt TLS encrypted traffic from malware that is run in a controlled environment, such as a sandbox. PolarProxy is a transparent SSL/TLS proxy created for incident responders and malware researchers. Sending the selected flows/packets to a packet analyzer tool like Wireshark or NetworkMiner is then just a mouse click away. Users can select the flows of interest and quickly filter out those packets from the loaded PCAP files. NetworkMiner can also parse PCAP files for off-line analysis and to regenerate/reassemble transmitted files and certificates from PCAP files.ĬapLoader is a Windows tool designed to handle large amounts of captured network traffic in the tcpdump/libpcap format (PCAP).ĬapLoader displays the contents of opened PCAP files as a list of TCP and UDP flows. without putting any traffic on the network. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. We at Netresec additionally maintain a comprehensive list of publicly available pcap files. We also develop and maintain other software tools, such as

Our most well known product is NetworkMiner, which is available in a professional as well as free open source version.

We specialize in software for network forensics and analysis of network traffic. Netresec is an independent software vendor with focus on the network security field.

Pcap analysis tools