drop pcap · ja3 imphash sni and http signatures · malware family attribution from network traffic · export csv · runs locally
drop pcap · correlates ja3 · http · dns · imphash heuristics