cisco / joy

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
Other
1.31k stars 329 forks source link

New Request - JA3 TLS fingerprint #256

Open cornelalexa opened 5 years ago

cornelalexa commented 5 years ago

Would it be possible when generating the TLS fingerprint to add a field for a JA3/JA3S md5 signature in the JSON schema? This would be quite helpful for look-ups in JA3 available databases also.

For reference here is their project which I am sure you guys know about... https://github.com/salesforce/ja3

Thank you.