_______________________________ _________ . .
/ \ (.. \_ , |\ /|
| Fish are friends, not food. \ \ O \ /| \ \/ /
\_______________________________ \ \______ \/ | \ /
\__\ vvvv\ \ | / |
\^^^^ == \_/ |
`\_ === \. |
/ /\_ \ / |
|/ \_ \| /
\________/
Accelerating the parsing PCAPS into JSON format as well as ability to extract files from those PCAPS
bruce has been created to help fellow digitial forensicators with reading and interpreting PCAP files without the need to trawl though Wireshark. bruce utilises tshark to convert the PCAPS and outputs them into JSON to then be indexed into log management or SIEM platforms alongside other data sources.
python3 bruce.py [-h] [-e] <directory_of_PCAPS>
python3 bruce.py -e /pcaps/
See the support for a list of commands and additional third-party tools to help with preparing images or data for bruce.
- String searching
See the open issues for a list of proposed features (and known issues).
See the changes for a list of previous changes to bruce.
Contributions are what make the open source community such an amazing place to be learn, inspire, and create. Any contributions you make are greatly appreciated.
- Fork the Project
- Create your Feature Branch (
git checkout -b feature/AmazingFeature) - Commit your Changes (
git commit -m 'Add some AmazingFeature') - Push to the Branch (
git push origin feature/AmazingFeature) - Open a Pull Request
Distributed under the MIT License. See LICENSE for more information.
ezaspy - ezaspython@gmail.com
Project Link: https://github.com/ezaspy/bruce