salesforce / ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add lookup table with ja3 hash to user-agent for additional metadata.

bryant-treacle opened this issue · comments

I've been working on a lookup table for ja3.bro that uses the input framework to ingest a file with ja3 hashes and their associated user-agents and add that meta-data to record. Wondering if you would be interested in adding that feature upstream. Below is my Github Repo.

https://github.com/bryant-treacle/SSL_Traffic_Hunting

Let me know what you think.