Wireshark Crash with Key-Log or Secrets Capture (CVE-2025-13945 HTTP/3 Dissector

ills3c Intel&Coffee@Ills3C

•updated 4 days ago•1•0•2

Detects the execution of Wireshark or tshark with command-line arguments indicating TLS key logging or packet capture file handling, followed shortly by a crash handler process (WerFault.exe or WerFaultSecure.exe) for the same process.