NetWatch is a lightweight, zero-config alternative to Wireshark for network triage that reads encrypted traffic to name processes and detect malware beacons.