diff options
Diffstat (limited to 'kevlar/2026-07-04/iocs/fingerprints.txt')
| -rw-r--r-- | kevlar/2026-07-04/iocs/fingerprints.txt | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/kevlar/2026-07-04/iocs/fingerprints.txt b/kevlar/2026-07-04/iocs/fingerprints.txt new file mode 100644 index 0000000..2582234 --- /dev/null +++ b/kevlar/2026-07-04/iocs/fingerprints.txt @@ -0,0 +1,14 @@ +# Weekly BP Report -- 2026-07-04 +# Fingerprints observed per ASN + +# No JA4/JA3 TLS fingerprints were collected this week. +# Honeylabs event data did not return populated TLS fingerprint fields. +# Recommend direct JA4 collection via PCAP or Zeek for future runs. + +# HASSH SSH Fingerprints +# No SSH HASSH fingerprints were collected this week. +# Honeylabs event data for SSH connections (port 22) did not have populated HASSH fields. + +# NOTE: TLS/HTTP/JA4/JA4H/HASSH fingerprint data was unavailable +# from both Honeylabs and Arkime sources this week due to +# field-level data gaps in the respective datasets. |