follow.it gives you an easy way to subscribe to NETRESEC Network Security Blog's news feed! Click on Follow below and we deliver the updates you want via email, phone or you can read them here on the website on your own news page.
You can also unsubscribe anytime painlessly. You can even combine feeds from NETRESEC Network Security Blog with other site's feeds!
Title: NETRESEC - Network Forensics and Network Security Monitoring
Is this your feed? Claim it!
CapLoader 2.2 adds new alerts for services and infrastructure that may be abused, makes flow transcripts easier to navigate and improves alert-based coloring. It also includes more helpful BPF filter feedback and several bug fixes.
More alerts
CapLoader’...
Around May 2026 Atlas RAT began using a new variant of its command-and-control (C2) protocol. Earlier versions started with a distinctive byte sequence:
53 46 75 63 6b 00 00 00
In ASCII, that is “SFuck” followed by three null bytes. The...
NetworkMiner 3.2 parses RADIUS authentication data and extracts more details from the OT/ICS protocols UMAS and IEC-104. The release also improves several existing protocol parsers and fixes file-reassembly issues, helping analysts extract more information from captured network traffic.
OT Protocol Support
NetworkMiner parses many OT/SCADA/ICS comm...
Security operations teams are handling increasing volumes of network events and security alerts. Whether those alerts are reviewed by human analysts, processed by AI, or handled through a combination of both, the result depends on the quality of the underlying detections.
No SOC can investigate an intrusion that never generated an alert. And if the incoming ale...
Identifying malware families is hard. Malware samples are often packed, strings encrypted and configurations may only appear after several stages of execution. Even experienced reverse engineers can get the malware family wrong and commercial sandboxes do not always produce correct classifications.
Malware C2 network traffic can provide another way to approach th...