Deep-dive tutorials, threat-hunting playbooks, and the latest in packet-capture analytics.
A real KongTuke ClickFix capture from malware-traffic-analysis.net, unravelled in the browser by a single tell - the WindowsPowerShell user agent that a curl-to-PowerShell relay stamps on every request. From a fake CAPTCHA to a 25 MB Python payload and a full systeminfo dump pushed out through a Cloudflare tunnel, the entire delivery chain crossed the wire in plain text.
On 2026-04-22 a single Mac ran a ClickFix 'fix-it' command and handed over its login keychain and every browser cookie. This is a packet-level teardown of that capture: the curl-based task C2 on 45.94.47.204, the zsh stealer it pushed, the fake .com.apple.accountsd password stash, and the TLS exfil to mpasvw.com.
A real SmartApeSG ClickFix capture from malware-traffic-analysis.net, walked end to end in the browser: from a 53 MB pile of mixed traffic to the exact PowerShell the victim pasted, the New-Object and Invoke-WebRequest loader, and the hosts that delivered NetSupport RAT.
CloudShark has no permanent free tier. This comparison uses one concrete training PCAP with DNS tunnel indicators to show where Wireshark, CloudShark-style workflows, and A-Packets fit when you need quick browser-based visualization.
A technical comparison of A-Packets and PcapAI for incident responders, SOC analysts, and consultants: packet-level investigation, automated reporting, privacy, pricing, and what each tool exposes in a real PCAP.
A practical guide to four PCAP visualizations in A-Packets for incident responders: topology graphs, conversation flow diagrams, traffic by protocol over time, and GeoIP/ASN maps. Each one is tied to what the evidence looks like in a real capture.
Learn how to transform raw PCAP files into actionable network insights using visualization. Discover techniques for mapping network topology, detecting anomalies through timelines, identifying geographic threats, and spotting bandwidth hogs—all without manual packet analysis.
Need extra capacity without a full-blown subscription? One-Time Packs add six-month credits that store each private report for 30 days - perfect for burst investigations, audits, or oversized files.
We're excited to announce that our registration process is now open to everyone! No more Gmail or Microsoft restrictions—register today using your preferred email address.
A-Packets On-Premise lets enterprises run PCAP analysis inside private Kubernetes clusters, with LDAP authentication, air-gapped operation, and S3-compatible storage.