NETWORK FORENSICS
Dead Packet Detective
A network-forensics workbench that collects DNS, ping, TCP handshake, and route evidence for a hostname or IP.
TargetDNS / ICMP / TCP / routeMarkdown case file
About the project
Runs probes locally and shows the exact commands and raw evidence as they finish.
Separates confirmed observations from hypotheses, next steps, and limitations.
Exports a Markdown case file with reproduction commands.
Uses the Python standard library and system networking tools. It does not capture packets or analyze PCAP files. Cases stay in memory until exported.