JA4

NetworkMiner 3.0

NetworkMiner 3.0 Released

| | CIP, EtherNet/IP, JA3, JA4, MSS, NetworkMiner, njrat, quic, Remcos, UMAS, UPnP
I am very proud to announce the release of NetworkMiner 3.0 today! This version brings several new protocols as well as user interface improvements to NetworkMiner. We have also made significant changes ...
NETRESEC Network Security Blog
PolarProxy 1.0.1

PolarProxy 1.0.1 Released

| | 0A000412, 0A000418, 0x0A000412, 0x0A000418, bad_certificate, decrypt_fail_errorcode, Fail Open, HUP, JA4, PolarProxy, SIGHUP, unknown_CA
The new release of PolarProxy generates JA4 fingerprints and enables ruleset to match on specific decryption errors, for example to enable fail-open in case the TLS traffic cannot be decrypted and inspected ...
NETRESEC Network Security Blog
NetworkMiner 2.9

NetworkMiner 2.9 Released

| | asset discovery, asset inventory, BackConnect, COTP, GTP, JA4, json, Modbus, NetworkMiner, StealC, TSAP, TZSP, VNC
NetworkMiner 2.9 brings several new and improved features to help analysts make sense of network traffic from malware, criminals and industrial control systems. Highlights from this new version include: TZSP supportStealC extractorImproved ...
NETRESEC Network Security Blog
CapLoader 1.9.6

CapLoader 1.9.6 Released

| | 104.21.7.13:80, 104.223.118.109:443, 104.248.81.48:443, 151.236.9.107:443, 159.89.124.188:443, a85be79f7b569f1df5e6087b69deb493, aptekoagraliy, BackConnect XOR, CapLoader, GzipLoader, IcedID, JA3, JA4, joekairbos, lazirusairnaf, Loda, regex, Remcos, seedkraproboy, t13i010400_0f2cb44170f4_1b583af8cc09, t13i010400_0f2cb44170f4_5c4c70b73fa0, ThreatFox, win.loda
CapLoader now detects even more malicious protocols and includes several new features such as JA4 fingerprints, API support for sharing IOCs to ThreatFox and OSINT lookups of malware families on Malpedia. The ...
NETRESEC Network Security Blog