From 083a60f55cfc8b33735117feb6df6904342818b5 Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 6 Jul 2026 06:36:32 -0400 Subject: chore: weekly asn update --- kevlar/2026-07-04/iocs/fingerprints.txt | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 kevlar/2026-07-04/iocs/fingerprints.txt (limited to 'kevlar/2026-07-04/iocs/fingerprints.txt') diff --git a/kevlar/2026-07-04/iocs/fingerprints.txt b/kevlar/2026-07-04/iocs/fingerprints.txt new file mode 100644 index 0000000..2582234 --- /dev/null +++ b/kevlar/2026-07-04/iocs/fingerprints.txt @@ -0,0 +1,14 @@ +# Weekly BP Report -- 2026-07-04 +# Fingerprints observed per ASN + +# No JA4/JA3 TLS fingerprints were collected this week. +# Honeylabs event data did not return populated TLS fingerprint fields. +# Recommend direct JA4 collection via PCAP or Zeek for future runs. + +# HASSH SSH Fingerprints +# No SSH HASSH fingerprints were collected this week. +# Honeylabs event data for SSH connections (port 22) did not have populated HASSH fields. + +# NOTE: TLS/HTTP/JA4/JA4H/HASSH fingerprint data was unavailable +# from both Honeylabs and Arkime sources this week due to +# field-level data gaps in the respective datasets. -- cgit v1.2.3