Latrodectus BackConnect I recently learned that the great folks from The DFIR Report have done a writeup covering the Latrodectus backdoor. Their report is titled From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion. I found it particularly interesting that the threat actors used Latrodectus to drop a B[...]

#Latrodectus #BackConnect #IcedID #VNC #Keyhole #Reverse #shell #NetworkMiner #The #DFIR #Report

Origin | Interest | Match

#Latrodectus #BackConnect #IcedID #VNC #Keyhole #Reverse #shell #NetworkMiner #The #DFIR #Report

Origin | Interest | Match

#NetworkMiner #Proxy-Authenticate #njRAT #Redline #Stealer #MC-NMF #MC-NBFSE

Origin | Interest | Match

NetworkMiner 3.1 Released This NetworkMiner release brings improved extraction of artifacts like usernames, passwords and hostnames from network traffic. We have also made some updates to the user interface and continued our effort to extract even more details from malware C2 traffic. More Artifacts Extracted Usernames and p[...]

#NetworkMiner #Proxy-Authenticate #NetworkMiner #Professional #njRAT #Redline #MC-NMF

Origin | Interest | Match

#NetworkMiner #Proxy-Authenticate #njRAT #Redline #Stealer #MC-NMF #MC-NBFSE

Origin | Interest | Match

Network Forensics with NetworkMiner Investigating PCAP files in TryHackMe’s NetworkMiner Room: Tool Overview 2

I uncover data hidden in network traffic, from identifying device information to analyzing anomalous behaviors in my new write-up “Network Forensics with NetworkMiner”.

#CyberSecurity #NetworkForensics #DFIR #PCAP #NetworkMiner

Network Forensics with NetworkMiner Investigating PCAP files in TryHackMe’s NetworkMiner Overview 1 Room

Network Forensics with NetworkMiner — Investigating PCAP files in TryHackMe’s NetworkMiner Overview 1 Room.

I walk through host discovery, credential extraction, and identifying potential indicators of compromise.

#CyberSecurity #DigitalForensics #TryHackMe #NetworkMiner #InfoSec

Comparison of tools that extract files from PCAP One of the premier features in NetworkMiner is the ability to extract files from captured network traffic in PCAP files. NetworkMiner reassembles the file contents by parsing protocols that are used t...

Comparison of tools that extract files from #PCAP
📖 #Chaosreader
⛏️ #NetworkMiner
🐿️ #Suricata
🌊 #tcpflow
🦈 #Wireshark
👁️ #Zeek
netresec.com?b=255329f

[Video] Original post on netresec.com

www.netresec.com/

#njRAT #Bladabindi #NetworkMiner #REMnux #2d65bc3bff4a5d31b59f5bdf6e6311d7 #ngrok.io #CAP #ret #inv #PLG #kl

Result Details

[Video] [Original post on netresec.com]

www.netresec.com/

#NetworkMiner #Linux #Ubuntu #Linux #Mint #Kali #Raspberry #Pi #Fedora #AlmaLinux #RHEL

Event Attributes

www.netresec.com/

#NetworkMiner #QUIC #CIP #EtherNet/IP #UMAS #REMCOS #MSS #UPnP #JA3 #JA4 #njRAT

Event Attributes