NetworkMiner
6.9#6 in digital forensics software$1,300 one-timeFree planLinuxmacOSWindows
VisitNetworkMiner vs Plaso
What both publish
| Fact | NetworkMiner | Plaso |
|---|---|---|
| Purpose | NetworkMiner extracts artifacts such as files, images, emails and passwords from captured network traffic in PCAP files and can sniff live network traffic. | Plaso is a Python-based engine used by tools to create super timelines or more targeted timelines for digital forensic analysis. |
NetworkMiner plans
- Free EditionFree
- Single User License$1,300, paid once
- Corporate License$6,500, paid once
Plaso plans
- Open-source Plaso packageFree
- PlasoFree
Pick NetworkMiner if…
NetworkMiner suits incident response teams, law enforcement, companies and organizations that need to inspect captured or live network traffic. The free edition is for Windows and Linux users who do not need PcapNG parsing.
Pick Plaso if…
Plaso suits digital forensic practitioners who need to collect and analyze timelines from files, devices, logs, or storage images. Its parser and plug-in framework may also suit users extending forensic workflows.