Find hidden activity in your network captures.
Guides network-capture investigations to uncover transferred files, exposed credentials, and suspicious communications.
When to use it
Use when analyzing network captures, including protocol inspection, data extraction, covert channels, damaged captures, and TLS decryption.
Give it a network capture; it analyzes the protocols, extracted data, and suspicious traffic.
What you provide
Uses Wireshark for display filters, following packet streams, and exporting captured objects.
Uses tshark for command-line capture inspection, protocol statistics, and stream analysis.
No additional actions listed.