I made a post a few months back about malicious user-agent string values. It appears to be a pretty popular post, so I decided to create a page dedicated to malicious user-agent strings.
I added several more strings to the list as well as updating some regex. Speaking of which, I still need to add more regex values to that page and I will also add some Wireshark display filters that you can use to find user-agent strings in PCAP files.
I also added a new list on the right side of the page dedicated to just indicators. You can find the new page here. Enjoy!
No comments:
Post a Comment
Please feel free to leave a comment that is relevant to the post.