Dissecting Impacket for Good and Bad
abdulmhsblog.com | blog | #active-directory | #kerberos | #smb | #red-team | #blue-team | #detection | #ioc | #impacket | #network-forensics
Summary
Rewriting Impacket internally led the author to publish Impacket-IoCs, 72+ protocol-level detection indicators, after finding most public detections rely on easily changed service names and artifacts.
- Published
- Collected
Skip to content