网络安全分析取证

1. argus

http://qosient.com/argus/

2.networkmine

3.tcpxtract

4.findsmtpinfo.py

5.docxtrack

5. smtpdump

6.http://jnetpcap.com/

7.https://labs.ripe.net/Members/wnagele/large-scale-pcap-data-analysis-using-apache-hadoop

8.https://github.com/cnbird1999/hadoop-pcap

9.https://github.com/aol/moloch

10.http://www.sans.org/reading-room/whitepapers/detection/security-analytics-fun-splunk-packet-capture-file-pcap-34580

11.http://www.net.in.tum.de/fileadmin/TUM/members/muenz/documents/muenz08wireshark.pdf

12.http://nsmwiki.org/Argus

13.https://www.linux-magazine.com/w3/issue/75/Argus.pdf

http://forensicscontest.com/