BackConnect

NetworkMiner 2.9

NetworkMiner 2.9 Released

| | asset discovery, asset inventory, BackConnect, COTP, GTP, JA4, json, Modbus, NetworkMiner, StealC, TSAP, TZSP, VNC
NetworkMiner 2.9 brings several new and improved features to help analysts make sense of network traffic from malware, criminals and industrial control systems. Highlights from this new version include: TZSP supportStealC extractorImproved ...
NETRESEC Network Security Blog
Cookie parameters from GzipLoader request in NetworkMiner 2.8.1

Forensic Timeline of an IcedID Infection

| | BackConnect, Cobalt Strike, CobaltStrike, ec74a5c51106f0419184d0dd08fb05bc, GzipLoader, IcedID, JA3S, Keyhole, Keylog, NetworkMiner, VNC, Windows Sandbox
The BackConnect and VNC parsers that were added to NetworkMiner 2.8.1 provide a unique possibility to trace the steps of an attacker with help of captured network traffic from a hacked computer ...
NETRESEC Network Security Blog
NetworkMiner 2.8.1

NetworkMiner 2.8.1 Released

| | 165.232.175.216, BackConnect, IcedID, NetworkMiner, njrat, RFB, RFC5626, RFC6143, VNC
I am happy to announce the release of NetworkMiner 2.8.1 today! This new release brings a VNC parser to NetworkMiner, so that screenshots, keystrokes and clipboard data can be extracted from unencrypted ...
NETRESEC Network Security Blog