diff options
| author | hrbrmstr <bob@rud.is> | 2026-07-06 06:36:32 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-07-06 06:36:32 -0400 |
| commit | 083a60f55cfc8b33735117feb6df6904342818b5 (patch) | |
| tree | a923e83319a601d644f3dffcf7721cdec094b671 /kevlar/2026-07-04/iocs/fingerprints.txt | |
| parent | ba215928b4f787ea110d7e02e20eb65b0d3b976f (diff) | |
chore: weekly asn update
Diffstat (limited to 'kevlar/2026-07-04/iocs/fingerprints.txt')
| -rw-r--r-- | kevlar/2026-07-04/iocs/fingerprints.txt | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/kevlar/2026-07-04/iocs/fingerprints.txt b/kevlar/2026-07-04/iocs/fingerprints.txt new file mode 100644 index 0000000..2582234 --- /dev/null +++ b/kevlar/2026-07-04/iocs/fingerprints.txt @@ -0,0 +1,14 @@ +# Weekly BP Report -- 2026-07-04 +# Fingerprints observed per ASN + +# No JA4/JA3 TLS fingerprints were collected this week. +# Honeylabs event data did not return populated TLS fingerprint fields. +# Recommend direct JA4 collection via PCAP or Zeek for future runs. + +# HASSH SSH Fingerprints +# No SSH HASSH fingerprints were collected this week. +# Honeylabs event data for SSH connections (port 22) did not have populated HASSH fields. + +# NOTE: TLS/HTTP/JA4/JA4H/HASSH fingerprint data was unavailable +# from both Honeylabs and Arkime sources this week due to +# field-level data gaps in the respective datasets. |