Repo with ICS PCAP files developed as a community asset by Tim Yardley, Anton Shipulin and many more.Ĭompilation of ICS PCAP files indexed by protocol (by Jason Smith) Packet capture analysis labs 'Packet Sleuth' by Ming Chow of Tufts UniversityĭFIR MONTEREY 2015 Network Forensics Challenge (by Phil Hagen of SANS)ĤSICS ICS Lab PCAP files - 360 MB of PCAP files from the ICS village at 4SICS VM login credentials are: user/passwordĭigital corpora for use in computer forensics education research from DEEP (Digital Evaluation and Exploitation Department of Computer Science, Naval Postgraduate School).įorensic Challenge 14 – “Weird Python“ (The Honeynet ProjectThe Honeynet Project) Hands-on Network Forensics - Training PCAP dataset from FIRST 2015 Network forensics training, challenges and contests. Shadowbrokers PCAPs by Eric Conrad, including ETERNALBLUE and ETERNALROMANCE. PCAP file with PowerShell Empire (TCP 8081) and SSL wrapped C2 (TCP 445) traffic from CERT.SE's technical writeup of the major fraud and hacking criminal case 'B 8322-16'. see original source (password protected zip) and analysis writeup (text) Created by the Services, Cybersecurity and Safety research group at University of Twente. Stratosphere IPS - PCAP and Argus datasets with malware traffic, created by Sebastian Garcia ( at the ATG group of the Czech Technical University

GTISK PANDA Malrec - PCAP files from malware samples run in PANDA, created by and GTISK Malware analysis blog that shares malware as well as PCAP files WARNING: The password protected zip files contain real malware (the PCAP archive is hosted on DropBox and MediaFire) Captured malware traffic from honeypots, sandboxes or real world intrusions.Ĭontagio Malware Dump: Collection of PCAP files categorized as APT, Crime or Metasplot

Analyze wireshark capture file