services.certificate
|
8807aba0f77f50fbbb35a31a69a4d68b19d9b2a524ab54f7263b212f57f5842a |
|
services.discovery_method
|
IPV4_WALK_FULL_PRIORITY_1 |
|
services.extended_service_name
|
RDP |
|
services.jarm.fingerprint
|
14d14d16d14d14d08c14d14d14d14dfd9c9d14e4f4f67f94f0359f8b28f532 |
|
services.jarm.cipher_and_version_fingerprint
|
14d14d16d14d14d08c14d14d14d14d |
|
services.jarm.tls_extensions_sha256
|
fd9c9d14e4f4f67f94f0359f8b28f532 |
|
services.jarm.observed_at
|
2025-07-06T12:14:27.101179413Z |
|
services.labels
|
network-administration |
|
services.labels
|
remote-access |
|
services.observed_at
|
2025-07-10T21:03:15.723303363Z |
|
services.perspective_id
|
PERSPECTIVE_UNKNOWN |
|
services.port
|
3389 |
|
services.rdp.protocol_flags.extended_client_data_supported |
true |
|
services.rdp.protocol_flags.dynvc_graphics_pipeline |
true |
|
services.rdp.protocol_flags.neg_resp_reserved |
true |
|
services.rdp.protocol_flags.restricted_admin_mode |
true |
|
services.rdp.protocol_flags.restricted_auth_mode |
true |
|
services.rdp.selected_security_protocol.rdstls |
true |
|
services.rdp.selected_security_protocol.raw_value
|
4 |
|
services.rdp.selected_security_protocol.standard_rdp |
false |
|
services.rdp.selected_security_protocol.tls |
false |
|
services.rdp.selected_security_protocol.credssp |
false |
|
services.rdp.selected_security_protocol.credssp_early_auth |
false |
|
services.rdp.selected_security_protocol.error |
false |
|
services.rdp.selected_security_protocol.error_ssl_required |
false |
|
services.rdp.selected_security_protocol.error_ssl_forbidden |
false |
|
services.rdp.selected_security_protocol.error_ssl_cert_missing |
false |
|
services.rdp.selected_security_protocol.error_bad_flags |
false |
|
services.rdp.selected_security_protocol.error_hybrid_required |
false |
|
services.rdp.selected_security_protocol.error_ssl_user_auth_required |
false |
|
services.rdp.selected_security_protocol.error_unknown |
false |
|
services.rdp.x224_cc_pdu_srcref
|
13330 |
|
services.service_name
|
RDP |
|
services.source_ip
|
206.168.34.76 |
|
services.tls.version_selected
|
TLSv1_2 |
|
services.tls.cipher_selected
|
TLS_RSA_WITH_AES_256_GCM_SHA384 |
|
services.tls.certificates.leaf_fp_sha_256
|
8807aba0f77f50fbbb35a31a69a4d68b19d9b2a524ab54f7263b212f57f5842a |
|
services.tls.certificates.leaf_data.subject_dn
|
CN=WIN-MTS8JDVCLLA |
|
services.tls.certificates.leaf_data.issuer_dn
|
CN=WIN-MTS8JDVCLLA |
|
services.tls.certificates.leaf_data.pubkey_bit_size
|
2048 |
|
services.tls.certificates.leaf_data.pubkey_algorithm
|
RSA |
|
services.tls.certificates.leaf_data.tbs_fingerprint
|
1b0ad703b956d73de0e985b00c468470c6528c52ab6c6e8dc06d69a7fa6df8e8 |
|
services.tls.certificates.leaf_data.fingerprint
|
8807aba0f77f50fbbb35a31a69a4d68b19d9b2a524ab54f7263b212f57f5842a |
|
services.tls.certificates.leaf_data.issuer.common_name
|
WIN-MTS8JDVCLLA |
|
services.tls.certificates.leaf_data.subject.common_name
|
WIN-MTS8JDVCLLA |
|
services.tls.certificates.leaf_data.public_key.key_algorithm
|
RSA |
|
services.tls.certificates.leaf_data.public_key.rsa.modulus
|
3DnX1dla2+hP+pop3kKMH8wfy0mn6602QDduERDYmO9LMvW4HAv1Sucd9g3lu181Z6ZmK9HE/XZJrmSRlzvLl7Mz5XPSCvqJbWs0zqfj87HIZd+ewVw3RF4UkYv5uYTQgpJAPEdSPttYpx8T/NSus3r+ihm2bdzK4+mgQGzzDI78Ucko6nhdnwc06BVI8ZmUa6FBcNEmAsaIv3lbin3sqQbwfVI+NFVGyXNfHfaAE9Ppg1mq/MGIad6aMdOLNmGgaGY6Qk1m4AmBl2whoP1XIl9leJKbn5WGlJ45LHdnUcWCo1AexH6ojsTO08o2zyy9/h/h7ZWF67fMIDxiwyun/Q== |
|
services.tls.certificates.leaf_data.public_key.rsa.exponent
|
AAEAAQ== |
|
services.tls.certificates.leaf_data.public_key.rsa.length
|
256 |
|
services.tls.certificates.leaf_data.public_key.fingerprint
|
550dba8e02824237dfc1fb804c58ab7af3fbde01665b8d6a1ba481f7b76a97ba |
|
services.tls.certificates.leaf_data.signature.self_signed |
true |
|
services.tls.certificates.leaf_data.signature.signature_algorithm
|
SHA256-RSA |
|
services.tls.ja3s
|
f75082535b4a79c07b31bdd0e2b7eb87 |
|
services.tls.ja4s
|
t120100_009d_bc98f8e001b5 |
|
services.tls.versions.tls_version
|
TLSv1_2 |
|
services.tls.versions.ja3s
|
f75082535b4a79c07b31bdd0e2b7eb87 |
|
services.tls.versions.ja4s
|
t120100_009d_bc98f8e001b5 |
|
|
services.tls.versions.tls_version
|
TLSv1_1 |
|
services.tls.versions.ja3s
|
9f2e2080c0409c26ea913d9273e88773 |
|
services.tls.versions.ja4s
|
t110100_0035_bc98f8e001b5 |
|
|
services.tls.versions.tls_version
|
TLSv1_0 |
|
services.tls.versions.ja3s
|
91589ea825a2ee41810c85fab06d2ef6 |
|
services.tls.versions.ja4s
|
t100100_0035_bc98f8e001b5 |
|
|
services.transport_fingerprint.raw
|
64000,128,true,MNWST,1460,false,false |
|
services.transport_protocol
|
TCP |
|
services.truncated |
false |
|