Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Arkime is a comprehensive open-source solution for large-scale packet capturing, indexing, and data management, aimed at enhancing the current security framework by preserving and organizing network traffic in the widely-used PCAP format. This system enables complete visibility into network activities, which is crucial for the rapid detection and rectification of security-related and network problems. Security personnel are equipped with vital visibility data that aids in the prompt response to incidents, allowing them to uncover the entire scope of any attacks. With its architecture designed for deployment across numerous clustered configurations, Arkime can effortlessly scale to handle traffic volumes of hundreds of gigabits per second. This capability empowers security analysts to effectively respond to, recreate, examine, and verify information regarding potential threats present in the network, facilitating timely and accurate countermeasures. Furthermore, as an open-source platform, Arkime not only offers users the advantages of transparency and economic efficiency but also promotes flexibility and receives robust community support, making it a valuable tool for any organization. Overall, Arkime stands out as an essential asset for organizations aiming to bolster their cybersecurity posture.
Description
Xplico is a prominent tool featured in many leading digital forensics and penetration testing distributions, including Kali Linux, BackTrack, DEFT, Security Onion, Matriux, BackBox, CERT Forensics Tools, Pentoo, and CERT-Toolkit. It supports simultaneous access for multiple users, allowing each to manage one or several cases effectively. The interface is web-based, and its backend database options include SQLite, MySQL, or PostgreSQL. Additionally, Xplico can function as a Cloud Network Forensic Analysis Tool. Its primary objective is to extract application data from internet traffic captures, such as retrieving emails via protocols like POP, IMAP, and SMTP, along with HTTP content, VoIP calls through SIP, and file transfers using FTP and TFTP from pcap files. Importantly, Xplico is not classified as a network protocol analyzer. As an open-source Network Forensic Analysis Tool (NFAT), it organizes the reassembled data with an associated XML file that distinctly identifies the data flows and the corresponding pcap file. This structured approach enables users to efficiently analyze and manage the data extracted from network traffic.
API Access
Has API
Yes
API Access
Has API
No
Pricing Details
Free
Free Trial
No
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Arkime
Country
United States
Website
arkime.com
Vendor Details
Company Name
Xplico
Founded
2007
Website
www.xplico.org