Deep-dive tutorials, threat-hunting playbooks, and the latest in packet-capture analytics.
On 2026-04-22 a single Mac ran a ClickFix 'fix-it' command and handed over its login keychain and every browser cookie. This is a packet-level teardown of that capture: the curl-based task C2 on 45.94.47.204, the zsh stealer it pushed, the fake .com.apple.accountsd password stash, and the TLS exfil to mpasvw.com.
A real SmartApeSG ClickFix capture from malware-traffic-analysis.net, walked end to end in the browser: from a 53 MB pile of mixed traffic to the exact PowerShell the victim pasted, the New-Object and Invoke-WebRequest loader, and the hosts that delivered NetSupport RAT.
CloudShark has no permanent free tier. This comparison uses one concrete training PCAP with DNS tunnel indicators to show where Wireshark, CloudShark-style workflows, and A-Packets fit when you need quick browser-based visualization.
A technical comparison of A-Packets and PcapAI for incident responders, SOC analysts, and consultants: packet-level investigation, automated reporting, privacy, pricing, and what each tool exposes in a real PCAP.
A practical guide to four PCAP visualizations in A-Packets for incident responders: topology graphs, conversation flow diagrams, traffic by protocol over time, and GeoIP/ASN maps. Each one is tied to what the evidence looks like in a real capture.
Learn how to transform raw PCAP files into actionable network insights using visualization. Discover techniques for mapping network topology, detecting anomalies through timelines, identifying geographic threats, and spotting bandwidth hogs—all without manual packet analysis.
Need extra capacity without a full-blown subscription? One-Time Packs add six-month credits that store each private report for 30 days - perfect for burst investigations, audits, or oversized files.
We're excited to announce that our registration process is now open to everyone! No more Gmail or Microsoft restrictions—register today using your preferred email address.
A-Packets On-Premise lets enterprises run PCAP analysis inside private Kubernetes clusters, with LDAP authentication, air-gapped operation, and S3-compatible storage.
This in-depth article explores how to analyze encrypted traffic using PCAP files, focusing on monitoring SSL/TLS sessions for potential vulnerabilities without decrypting the data. Learn how A-Packets can help identify security risks like expired certificates, weak cipher suites, and anomalies such as Heartbleed attacks. By examining metadata such as client and server encryption algorithms, cipher suite distribution, and certificate validity, A-Packets offers valuable insights into network security. Discover the key aspects of encrypted traffic analysis and how proactive monitoring with A-Packets can safeguard your network from potential threats.