JA3
#Network & Cloud#Network Security
An OpenFlow honeypot that detects unused IP addresses and simulates network traffic to attract and analyze potential threats
JA3: A Method for Creating SSL/TLS Client Fingerprints
JA3 is a method used to generate SSL/TLS client fingerprints. These fingerprints can be easily shared and utilized for threat intelligence purposes.
It was invented at Salesforce in 2017
It was originally developed at Salesforce in 2017, but is currently maintained by John Althouse at FoxIO-LLC.
The project includes JA3 and JA3S scripts for enhanced cybersecurity
The project features JA3 and JA3S scripts designed for use with Zeek and Python. Additionally, support has been integrated into various cybersecurity tools and platforms.
