Webscout blog

What is Webscout?

What is Webscout?

We hear this question often, and for good reason. We've never been good at communicating our capabilities publicly. The status as an "if you know, you know" company has certainly had its advantages. Most importantly, it’s allowed us to stay focused on hunting and gathering

Dissecting JA4H for improved Sliver C2 detections

Dissecting JA4H for improved Sliver C2 detections

Background On November 18, 2024, Palo Alto Networks announced the discovery of two critical vulnerabilities, CVE-2024-0012 and CVE-2024-9474, in the operating system that powers their firewall devices. The following day, watchTowr published a report detailing how these vulnerabilities could be chained together to achieve remote code execution. Shortly after the

Introducing JA4+ Support in Webscout: Elevating Threat Detection with Advanced Network Fingerprinting

Introducing JA4+ Support in Webscout: Elevating Threat Detection with Advanced Network Fingerprinting

We are proud to announce that Webscout now supports JA4+, a suite of advanced network profiling techniques developed by FoxIO's John Althouse. Building upon the highly successful JA3 fingerprinting standard, JA4+ enhances our ability to detect threats, track adversaries, and make sense of network traffic at scale. This