Hot Topics

Protocol Identification

CapLoader 1.9.4

CapLoader 1.9.4 Released

| | CapLoader, JA3, JA3S, pcap, Protocol Detection, Protocol Identification, SPID, TLS, VXLAN
A new version of our advanced PCAP filtering tool CapLoader was released today. The new CapLoader 1.9.4 release includes features like JA3 hash extraction from TLS traffic and a fantastic thing called ...
NETRESEC Network Security Blog
Services tab in CapLoader

Detecting Cobalt Strike and Hancitor traffic in PCAP

| | 1768.py, CapLoader, Cobalt Strike, CobaltStrike, Hancitor, Netresec, nsm, pcap, periodicity, PIPI, Protocol Identification, video, videotutorial, Windows Sandbox
This video shows how Cobalt Strike and Hancitor C2 traffic can be detected using CapLoader. Your browser does not support the video tag. I bet you're going: 😱 OMG he's analyzing Windows ...
NETRESEC Network Security Blog