SNF
Offline passive NDR for air-gapped networks. Written in Rust
SNF 이란?
SNF (Shadow Network Fingerprinting) is a passive NDR engine for air-gapped environments: defense networks, nuclear infrastructure, ICS, and classified SOCs. It fingerprints TLS via JA3/JA4, detects C2 beacons, DGA domains, DNS tunnels, and full ICS/SCADA protocol abuse. Zero network calls. Ever. Not a setting. Architecture. Output is deterministic NDJSON with SHA-256 verification and court-admissible evidence bundles. Open-core layer Apache 2.0. Full intelligence engine proprietary.
스크린샷
?
아직 댓글이 없어요. 가장 먼저 남겨보세요!
SNF 에 대한 X의 실제 대화
X에 게시