Post #3538802
2026-07-02 17:04 UTC
@james_inthe_box@infosec.exchange thanks for this. Threw together a quick rule to spot the certificate issuer. Should be in today's ETOPEN release PureRAT TLS Certificate Observed (PureRAT Agent)
Replies (1)
-
@james_inthe_box@infosec.exchange 2026-07-02 17:30
@da_667@infosec.exchange Awesome!