Decoding njRAT traffic with NetworkMiner

Author(s): Erik Hjelmvik
Organization: Netresec

Open article directly Open article on Archive.org

2024-01-04 ⋅ Netresec ⋅ Erik Hjelmvik
Hunting for Cobalt Strike in PCAP
Cobalt Strike

2023-10-12 ⋅ Netresec ⋅ Erik Hjelmvik
Forensic Timeline of an IcedID Infection
Cobalt Strike IcedID IcedID Downloader

2023-04-26 ⋅ Netresec ⋅ Erik Hjelmvik
EvilExtractor Network Forensics
EvilExtractor

Propose Change Decoding njRAT traffic with NetworkMiner