Packages

ja3

By salesforce

JA3 creates 32 character SSL client fingerprints and logs them as a field in ssl.log. These fingerprints can easily be shared as threat intelligence or used as correlation items for enhanced alerting and analysis. This package also adds JA3 to the Zeek Intel Framework. https://github.com/salesforce/ja3

ja4

By foxio

Official Zeek package for JA4+ network fingerprinting.

Page 1 of 1, showing 2 record(s) out of 2 total