VM login credentials are: user/passwordĭigital corpora for use in computer forensics education research from DEEP (Digital Evaluation and Exploitation Department of Computer Science, Naval Postgraduate School).įorensic Challenge 14 – “Weird Python“ (The Honeynet ProjectThe Honeynet Project) Hands-on Network Forensics - Training PCAP dataset from FIRST 2015 Network forensics training, challenges and contests. Shadowbrokers PCAPs by Eric Conrad, including ETERNALBLUE and ETERNALROMANCE. PCAP file with PowerShell Empire (TCP 8081) and SSL wrapped C2 (TCP 445) traffic from CERT.SE's technical writeup of the major fraud and hacking criminal case 'B 8322-16'. see original source (password protected zip) and analysis writeup (text) Created by the Services, Cybersecurity and Safety research group at University of Twente. Stratosphere IPS - PCAP and Argus datasets with malware traffic, created by Sebastian Garcia ( at the ATG group of the Czech Technical University GTISK PANDA Malrec - PCAP files from malware samples run in PANDA, created by and GTISK Malware analysis blog that shares malware as well as PCAP files WARNING: The password protected zip files contain real malware (the PCAP archive is hosted on DropBox and MediaFire)

Captured malware traffic from honeypots, sandboxes or real world intrusions.Ĭontagio Malware Dump: Collection of PCAP files categorized as APT, Crime or Metasplot

Wireshark download media