Archive
Detect ICMP-Ghost Implant ICMP and DNS Tunnelling C2 Traffic Using PacketSmith Yara-X & ICMP Detection Modules
Clustering macOS ClickFix Campaign Webpages Using the HTTP-Basma Fingerprinting Algorithm
HTTP-Basma - Clustering Verbosus Fingerprints
HTTP Status-Line (SL) Shenanigans
HTTP-Basma - Platform Update (v3.0 - Gaudi)
Introducing HTTP-Basma - Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation
Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state
Detect Shulfar Malware Encrypted TCP C&C Traffic Using PacketSmith Yara-X Detection Module
Detect SnappyClient C&C Traffic Using PacketSmith + Yara-X Detection Module
Detect Malicious .ip6.arpa TLD Reverse DNS Zone Response Packets using PacketSmith Yara-X Detection Module
How to Apply VXLAN-GBP Encapsulation to PCAP Files Using PacketSmith
How to Detect EternalBlue Exploitation