chopshop

github.comtool

is a MITRE developed framework to aid analysts in the creation and execution of pynids based decoders and detectors of APT tradecraft.

from

Malware Analysis, Cybersecurity Blue Team, PCAPTools

added

2026-10-10

likes

0

Malware Analysis › Network: “Protocol analysis and decoding framework.”

Cybersecurity Blue Team › Security monitoring > Network Security Monitoring (NSM): “Framework to aid analysts in the creation and execution of pynids-based decoders and detectors of APT tradecraft.”

PCAPTools › Traffic Analysis/Inspection: “is a MITRE developed framework to aid analysts in the creation and execution of pynids based decoders and detectors of APT tradecraft.”