aboutsummaryrefslogtreecommitdiff
path: root/kevlar/2026-07-04/iocs/fingerprints.txt
blob: 25822340e402fc1b80b02c2696c71177554c4b8d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
# Weekly BP Report -- 2026-07-04
# Fingerprints observed per ASN

# No JA4/JA3 TLS fingerprints were collected this week.
# Honeylabs event data did not return populated TLS fingerprint fields.
# Recommend direct JA4 collection via PCAP or Zeek for future runs.

# HASSH SSH Fingerprints
# No SSH HASSH fingerprints were collected this week.
# Honeylabs event data for SSH connections (port 22) did not have populated HASSH fields.

# NOTE: TLS/HTTP/JA4/JA4H/HASSH fingerprint data was unavailable
# from both Honeylabs and Arkime sources this week due to
# field-level data gaps in the respective datasets.