Repository Index

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang