Add lookup table with ja3 hash to user-agent for additional metadata.
bryant-treacle opened this issue · comments
bryant-treacle commented
I've been working on a lookup table for ja3.bro that uses the input framework to ingest a file with ja3 hashes and their associated user-agents and add that meta-data to record. Wondering if you would be interested in adding that feature upstream. Below is my Github Repo.
https://github.com/bryant-treacle/SSL_Traffic_Hunting
Let me know what you think.