My Company Legal Name is the academic publisher behind Netfox.Detective, a specialized network-forensics platform developed at the Brno University of Technology. The software is engineered for investigators, SOC analysts and researchers who need to reconstruct application-layer content from captured traffic; it automatically reassembles flows carried over HTTP, HTTPS, SIP, RTP, SMTP, FTP, TFTP, DNS, DHCP and other common protocols, then presents extracted files, VoIP calls, e-mails, images, certificates and transcripts in a timeline that can be filtered by IP, port, timestamp or keyword. Typical use cases include incident-response triage, malware-traffic inspection, insider-threat inquiries, lawful interception exercises and student labs in digital-forensics curricula. Because the tool works offline against pcap or live against a mirror port, it is equally suited to air-gapped classified environments and to cloud packet brokers. Decryption of TLS 1.2/1.3 sessions is supported when RSA or ephemeral key material is supplied, while VoIP playback and SIP ladder diagrams accelerate telecom abuse investigations. The entire workflow is scriptable through Python so that enterprises can chain extraction, carving, hash calculation and Yara scanning into unattended pipelines. Netfox.Detective is available for free on get.nero.com, where downloads are delivered through trusted Windows package sources such as winget, always installing the latest release and allowing batch deployment alongside other network utilities.
A novel Network forensic analysis tool that implements methods for extraction of application content from communication using supported protocols.
Details