rita icon indicating copy to clipboard operation
rita copied to clipboard

Published 20 hours ago • verified publisher icon activecm

NeverInclude setting not applied to JA3 hashes or User Agent strings

Open ethack opened this issue 4 years ago • 0 comments

Current behavior

I have a network configured in RITA"s NeverInclude section but JA3 hashes still end up being processed from that network. Same behavior for User Agent strings.

Desired behavior

NeverInclude (and AlwaysInclude and InternalSubnets) should apply to ja3 hashes and user agent strings.

ethack avatar Sep 15 '20 17:09 ethack