7 lines
393 B
Plaintext
7 lines
393 B
Plaintext
[package]
|
|
script_dir = zeek
|
|
description = JA3 creates 32 character SSL client fingerprints and logs them as a field in ssl.log. These fingerprints can easily be shared as threat intelligence or used as correlation items for enhanced alerting and analysis. This package also adds JA3 to the Zeek Intel Framework.
|
|
https://github.com/salesforce/ja3
|
|
tags = intel, ssl, logging
|
|
version = 1.2.0
|