The C2 Matrix
About
SANS Slingshot C2 Matrix VM
Contribute
Feedback
Lab Infrastructure
C2
Attack Infrastructure
- Resources
- Redirectors/Relays
Detection

Powered by GitBook

On this page

Was this helpful?

Detection

JARM

TLS fingerprinting of C2 Servers

PreviousJA3/JA3S Hashes

Last updated 4 years ago

Salesforce released a tool called JARM that allows you to fingerprint C2 servers:

python jarm.py salesforce.com

GitHub - salesforce/jarmGitHub