Python · MIT
ninedter/pcap-hunter
🔍 AI-assisted threat-hunting workbench for SOC and DFIR analysts — turns raw PCAPs into actionable intel with a Zeek + tshark pipeline, C2/beacon detection, JA3 fingerprinting, MITRE ATT&CK mapping, OSINT enrichment, and multilingual reports from local or cloud LLMs.
★ 166
Stars
36 forks · 0 open issues
—
Growth · stale
We stopped seeing this repository in its topic's top results, so its star count is frozen at the date it was last read. Subtracting from a frozen number would read as zero growth, which would be false, so no rate is shown.
14.4
Momentum / 100
see the breakdown below
11mo ago
Created
last push 2mo ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 0.0 | — — no measurable rate |
| Acceleration | 15 | 0.0 | needs 7-day and 30-day rates side by side |
| Freshness | 15 | 8.0 | last push 2mo ago; decays to zero at 180 days |
| Scale | 15 | 6.4 | 166 stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 14.4 | capped at 35 because growth is unmeasured |
Detail
| Topics | blue-teamcybersecuritydfirincident-responsellmmitre-attacknetwork-forensicsnetwork-securitypacket-analysispcappcap-analyzerpythonsecurity-toolsstreamlitthreat-huntingthreat-intelligencetsharkwiresharkyarazeek |
| Matched on | Security (security-tools) |
| Short window | +0 stars over 9 days = 0.0/day |
| Long window | +-1 stars over 26 days = 0.0/day |
| Lifetime average | 0.48 stars/day over 348 days |
| First seen here | 2026-10-11 |
| Last read | 11d ago |