alphasoc / nfr

A lightweight tool to score network traffic and flag anomalies
https://alphasoc.com
Other
122 stars 19 forks source link

Allow PCAP files to be loaded for scoring #41

Closed chrisforce1 closed 7 years ago

chrisforce1 commented 7 years ago

i.e. provide a path to a PCAP file from the command line, which then extracts the DNS query events, sends and sends them to the API for scoring. This will be useful with regard to incident response data and artifacts that consultants and security teams wish to score.