MalShark uses AI (MCP) to auto‑analyze malware traffic, benchmarked on real samples
MalShark is an MCP‑based server that lets AI clients run tshark analyses on PCAPs via natural‑language prompts, producing structured IOC reports. Its detection rules were tuned and benchmarked against real malware captures from malware‑traffic‑analysis.net, ensuring practical relevance.