services.certificate
|
67f6442939dbe3a7ed1a5d51c0f0d0bbc74b6216b70bbd658258ca23caea3772 |
|
services.extended_service_name
|
RDP |
|
services.jarm.fingerprint
|
26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532 |
|
services.jarm.cipher_and_version_fingerprint
|
26d26d16d26d26d22c26d26d26d26d |
|
services.jarm.tls_extensions_sha256
|
fd9c9d14e4f4f67f94f0359f8b28f532 |
|
services.jarm.observed_at
|
2025-02-03T13:30:44.418932239Z |
|
services.labels
|
network-administration |
|
services.labels
|
remote-access |
|
services.observed_at
|
2025-02-11T09:03:54.468184536Z |
|
services.perspective_id
|
PERSPECTIVE_UNKNOWN |
|
services.port
|
3389 |
|
services.rdp.protocol_flags.extended_client_data_supported |
true |
|
services.rdp.protocol_flags.dynvc_graphics_pipeline |
true |
|
services.rdp.protocol_flags.neg_resp_reserved |
true |
|
services.rdp.protocol_flags.restricted_admin_mode |
true |
|
services.rdp.protocol_flags.restricted_auth_mode |
false |
|
services.rdp.selected_security_protocol.rdstls |
true |
|
services.rdp.selected_security_protocol.raw_value
|
4 |
|
services.rdp.selected_security_protocol.standard_rdp |
false |
|
services.rdp.selected_security_protocol.tls |
false |
|
services.rdp.selected_security_protocol.credssp |
false |
|
services.rdp.selected_security_protocol.credssp_early_auth |
false |
|
services.rdp.selected_security_protocol.error |
false |
|
services.rdp.selected_security_protocol.error_ssl_required |
false |
|
services.rdp.selected_security_protocol.error_ssl_forbidden |
false |
|
services.rdp.selected_security_protocol.error_ssl_cert_missing |
false |
|
services.rdp.selected_security_protocol.error_bad_flags |
false |
|
services.rdp.selected_security_protocol.error_hybrid_required |
false |
|
services.rdp.selected_security_protocol.error_ssl_user_auth_required |
false |
|
services.rdp.selected_security_protocol.error_unknown |
false |
|
services.rdp.x224_cc_pdu_srcref
|
13330 |
|
services.service_name
|
RDP |
|
services.source_ip
|
162.142.125.222 |
|
services.tls.version_selected
|
TLSv1_2 |
|
services.tls.cipher_selected
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA |
|
services.tls.certificates.leaf_fp_sha_256
|
67f6442939dbe3a7ed1a5d51c0f0d0bbc74b6216b70bbd658258ca23caea3772 |
|
services.tls.certificates.leaf_data.subject_dn
|
CN=WIN-869B64EUD0A |
|
services.tls.certificates.leaf_data.issuer_dn
|
CN=WIN-869B64EUD0A |
|
services.tls.certificates.leaf_data.pubkey_bit_size
|
2048 |
|
services.tls.certificates.leaf_data.pubkey_algorithm
|
RSA |
|
services.tls.certificates.leaf_data.tbs_fingerprint
|
3c5cc6c17284405296c35104219215f9e31e7c6cdcfb9085fd82d69b419e6954 |
|
services.tls.certificates.leaf_data.fingerprint
|
67f6442939dbe3a7ed1a5d51c0f0d0bbc74b6216b70bbd658258ca23caea3772 |
|
services.tls.certificates.leaf_data.issuer.common_name
|
WIN-869B64EUD0A |
|
services.tls.certificates.leaf_data.subject.common_name
|
WIN-869B64EUD0A |
|
services.tls.certificates.leaf_data.public_key.key_algorithm
|
RSA |
|
services.tls.certificates.leaf_data.public_key.rsa.modulus
|
vAMX1V+ZALr6DpXn3PDLz+G2jG83qYqcp9BayDgci2ECDX5VKvd0kSQEp7+xr9MmypDot8p4DnE+M9Bj0n18hIEMnwXqLHmMzhtle30ff2pG4DRKHCjeQtv7LRE5/x/vh018tZWFlLyR5XiSz/Cy3KGJMVVxuJtQ+MnVFRtQogGDL2m99tqhQvNLenWDiJcYwxHtke0MxQ/VsfWju9YrxEO0HhGep4M5TcUOh11T8xHTVtlOZJBGaf7WSI6sMRYipt+iazJBCo0EjNiqJ03pha9pghTLFwg+tNVQ1vwuEfsfiNeA5tenqw5doklMg5oi+JX6yYH7E3VFFov8X0dmQQ== |
|
services.tls.certificates.leaf_data.public_key.rsa.exponent
|
AAEAAQ== |
|
services.tls.certificates.leaf_data.public_key.rsa.length
|
256 |
|
services.tls.certificates.leaf_data.public_key.fingerprint
|
2fd9e1b7a1a76f28a91b43a103b036540f9c9ffbe521177943badc8ffc42c2e1 |
|
services.tls.certificates.leaf_data.signature.self_signed |
true |
|
services.tls.certificates.leaf_data.signature.signature_algorithm
|
SHA256-RSA |
|
services.tls.server_key_exchange.ec_params.named_curve
|
23 |
|
services.tls.ja3s
|
8529fd8de0d7f73186ef5ea8b4531a76 |
|
services.tls.ja4s
|
t120100_c014_bc98f8e001b5 |
|
services.tls.versions.tls_version
|
TLSv1_2 |
|
services.tls.versions.ja3s
|
8529fd8de0d7f73186ef5ea8b4531a76 |
|
services.tls.versions.ja4s
|
t120100_c014_bc98f8e001b5 |
|
|
services.tls.versions.tls_version
|
TLSv1_1 |
|
services.tls.versions.ja3s
|
1308be477c8afb355e2860ab89378ae5 |
|
services.tls.versions.ja4s
|
t110100_c014_bc98f8e001b5 |
|
|
services.tls.versions.tls_version
|
TLSv1_0 |
|
services.tls.versions.ja3s
|
bcf3a836c82d12ee988005fb0c011445 |
|
services.tls.versions.ja4s
|
t100100_c014_bc98f8e001b5 |
|
|
services.transport_protocol
|
TCP |
|
services.truncated |
false |
|