FoxIO

ja4

JA4+ is a suite of network fingerprinting standards

LogSlash

A standard for reducing log volume without sacrificing analytical capability

ja4tscan

JA4TScan is an active TCP server fingerprinting tool.

ja4-nginx-module

Nginx module that calcuates fingerprints from the JA4+ suite

ja4-nginx

Nginx fork modified to store some TLS handhsake data. Intended for use in conjunction with the ja4-nginx-module: https://github.com/FoxIO-LLC/ja4-nginx-module

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

nginx-ssl-ja3

nginx module for SSL/TLS ja3 fingerprint.

content

Demisto Platform ever-growing Content Repository

Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

foxio-llc.github.io

Source code for the FoxIO blog

jarm

license

packages

The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.

terraform-aws-waf-webacl-supporting-resources

A module to create several resources needed by AWS WAF WebACL.

tpotce

🍯 T-Pot - The All In One Honeypot Platform 🐝

ja4-openssl

TLS/SSL and crypto library