# Network Baseline Generator — Offline Network Security Tool
[](LICENSE)
[](https://www.python.org/downloads/)
[](#)
[](https://github.com/reshot2005/secintel-core)
[](https://github.com/reshot2005/network-baseline-generator)
> **Build known-clean network traffic baselines for anomaly detection — create reproducible offline baselines for SOC and blue-team workflows.**
**Category:** Network Security
**Collection phase tool:** 11/12
**Schema:** [secintel-core](https://github.com/reshot2005/secintel-core) v1
**Repository:** https://github.com/reshot2005/network-baseline-generator
**Author account:** [reshot2005](https://github.com/reshot2005)
## Why Network Baseline Generator ranks for security search
Network Baseline Generator is an **offline-first**, research-grade **network security** utility designed for practitioners who need reproducible analysis without uploading sensitive artifacts to SaaS scanners. It emits structured findings through the shared **secintel** evidence taxonomy (OBSERVED / DERIVED / INFERRED / CORRELATED / VERIFIED) so results are auditable, exportable, and CI-friendly.
### Primary SEO keywords
`network baseline, traffic profile, known-clean baseline, anomaly baseline, SOC baseline`
### Topics
`network-security` `cybersecurity` `nmap` `pcap` `threat-hunting` `infosec` `security-tools` `python` `offline-security` `blue-team` `baselining` `blue-team`
## What problem does this solve?
Generate a known-clean traffic profile that downstream anomaly detectors can use as a trustworthy baseline.
Purpose-built baseline product for offline pipelines.
## Key features
- Clean-profile generation
-
Reproducible baseline artifacts
-
Feeds anomaly detectors
-
Offline-only workflow
-
Documented methodology
- Create weekly clean baselines
-
Prepare anomaly detector inputs
-
Document normal network behavior
- Security engineers & AppSec / NetSec specialists
- SOC / DFIR / malware analysts (as applicable)
- Bug bounty hunters and penetration testers
- DevSecOps teams needing offline/air-gapped tooling
- Students and researchers learning network security
git clone https://github.com/reshot2005/network-baseline-generator.git cd network-baseline-generator python3.12 -m venv .venv source .venv/bin/activate # Windows: .venv\Scripts\Activate.ps1 pip install -e ../secintel-core # or: pip install -e git+https://github.com/reshot2005/secintel-core.git#egg=secintel-core pip install -e ".[dev]" network-baseline-generator analyze sample_data --json network-baseline-generator analyze sample_data --html report.html network-baseline-generator version
network-baseline-generator analyze sample_data \ --json --html report.html --csv findings.csv --sarif results.sarif
- Findings follow secintel classification rules (confidence only where schema allows).
- Provenance includes tool version, config hash, and input integrity metadata.
- Set
SECINTEL_SOURCE_DATE_EPOCHfor deterministic timestamps in CI.
export SECINTEL_SOURCE_DATE_EPOCH=1704067200 network-baseline-generator analyze sample_data --jsonruff check src tests mypy src pytest
Browse more offline security research tools by reshot2005: network security, web AppSec, DevSecOps, digital forensics, and static malware analysis — each in its own public repository with the same secintel reporting contract.
MIT — free for research, education, and commercial use with attribution preserved.
Network Baseline Generator (network-baseline-generator) — Build known-clean network traffic baselines for anomaly detection — create reproducible offline baselines for SOC and blue-team workflows. Search terms: network baseline, traffic profile, known-clean baseline, anomaly baseline, SOC baseline. Open-source, MIT-licensed, Python 3.12, offline cybersecurity tool by reshot2005.