Repository navigation

Add a `pcap` artefact kind with a native Kerberos dissector (RFC/POC) - #246

Closed

4ndr3w6 wants to merge 10 commits into

WithSecureOpenSource:masterfrom

4ndr3w6:feat/pcap-ingestion

Closed

Add a `pcap` artefact kind with a native Kerberos dissector (RFC/POC)#246
4ndr3w6 wants to merge 10 commits into
WithSecureOpenSource:masterfrom
4ndr3w6:feat/pcap-ingestion

Commits on Oct 22, 2026
- docs(pcap): architecture decision record for PCAP ingestion
  
  Andrew Schwartz
  and
  claude
  committed
  978989f
- build(pcap): add pcap-parser + etherparse; optional tshark feature
  
  Andrew Schwartz
  and
  claude
  committed
  3697e55
- feat(pcap): native Kerberos-over-88 dissection as a new file kind
  
  Andrew Schwartz
  and
  claude
  committed
  fb8d4ba
- feat(pcap): wire Pcap kind through hunt/cli/search engine paths
  
  Andrew Schwartz
  and
  claude
  committed
  2fcc8dd
- feat(pcap): Sigma mapping, example network rules, and usage README
  
  Andrew Schwartz
  and
  claude
  committed
  4acda19
Commits on Oct 23, 2026