Collaborate Disseminate
Learning abit about allowed OCSP hosts on Windows 10:
I’ve picked up OCSP requests carried out by CryptSvc pointing towards an OCSP server in Japan. Referring to Microsoft’s Win10 Non-enterprise endpoint lists, I’ve already witnessed and c… Continue reading OCSP hosts. How to tell Malicious OCSP hosts apart
I’ve recently decrypted my TLS traffic from Chrome to better inspect my PC’s network behaviour.
PRTG Monitor on my PC seems to be sending a GET request for the login page assigned to the router’s gateway address. Not necessarily proof it’s… Continue reading PC sending GET requests to router page by itself? [closed]
Originally posted on Network Engineering:
To Summarize, the total of my subprotocol/subvariant packet percentages do not sum up to its header, the total TCP % Packets noted by the tool. Transport Layer Protocols may not need to add up in… Continue reading Wireshark -Protocol Hierarchy Omitting large amount of subprotocol traffic [closed]
I’ve run a malware ruleset from the Yara rules repository run on my Sys32 directory without -r and come across a lot of positives (+extra counts) for GLASSES and GLASSESCode
Most matches are with DirectX DLLs but I assume it’s just coincid… Continue reading False Positives for YARA rule
As title suggests im wondering if a game ,for example, has any business accessing ‘webcache_counters’.
After attempting to clean my webcachev01 file due to its oddly large filesize given the fact i dont use IE or Microsoft Edge at all, I n… Continue reading Unrelated applications like games accessing ‘webcache’ related files
Old time lurker and odd poster here with a general question. I think this might fall more in the nature of understanding system processes.
I’ve activated comodo HIPS on paranoid mode to firstly see if i have an intrusion via… Continue reading Comodo Firewall HIPS (Paranoid Mode) Regedits