Recon Village·19 min
Fae Carlisle
Shows how JARM TLS fingerprints and reused server configurations can cluster adversary infrastructure even after domains and IP addresses change.
infrastructurethreatintelligence+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk · loading…
Recon Village·19 min
Fae Carlisle
Shows how JARM TLS fingerprints and reused server configurations can cluster adversary infrastructure even after domains and IP addresses change.