Network Forensics Plugin

Network-Forensics-Plugin provides a structured methodology for auditing the network behavior of local IoT devices. It automates the capture and analysis of device traffic to identify cloud dependencies, hard-coded DNS, and P2P communication patterns. By leveraging tools like tshark and nmap alongside OPNsense API integrations, the project enables users to document egress behavior and rigorously verify the efficacy of local-only firewall policies.

The toolkit features a standardized security rubric to score devices based on their cloud exposure, cleartext data transmission, and service vulnerabilities. It is intended for privacy-conscious users and network administrators who need to isolate IoT hardware from external cloud services while maintaining local functionality, such as NVR recording and RTSP streaming. The framework provides a repeatable audit trail for monitoring device attempts to bypass network restrictions after initial lockdown.