zkg.meta

[package]
script_dir = zeek
description = JA3 creates 32 character SSL client fingerprints and logs them as a field in ssl.log. These fingerprints can easily be shared as threat intelligence or used as correlation items for enhanced alerting and analysis. This package also adds JA3 to the Zeek Intel Framework.
    https://github.com/salesforce/ja3
tags = intel, ssl, logging
version = 1.2.0