1. A method comprising: aggregating a payload data from different network packets to form an matching the payload data with an entry of a library of known artifacts; determining a type of the payload data based on a match with the entry of the library of known artifacts; separating the payload data from a header data in a network packet; and communicating the aggregated payload data as an extracted artifact to a user.