MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Updated JA3 to have own data type ja3-fingerprint-md5 and bumped the version

pull/136/head
eCrimeLabs 2018-12-30 12:31:17 +01:00
parent 14882579fb
commit 68ca8b0a92
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
objects/ja3/definition.json
View File

@ -2,12 +2,12 @@
"name": "ja3", "name": "ja3",
"meta-category": "network", "meta-category": "network",
"description": "JA3 is a new technique for creating SSL client fingerprints that are easy to produce and can be easily shared for threat intelligence. Fingerprints are composed of Client Hello packet; SSL Version, Accepted Ciphers, List of Extensions, Elliptic Curves, and Elliptic Curve Formats. https://github.com/salesforce/ja3", "description": "JA3 is a new technique for creating SSL client fingerprints that are easy to produce and can be easily shared for threat intelligence. Fingerprints are composed of Client Hello packet; SSL Version, Accepted Ciphers, List of Extensions, Elliptic Curves, and Elliptic Curve Formats. https://github.com/salesforce/ja3",
"version": 3, "version": 4,
"uuid": "09b45449-5d6e-492c-a68a-cb2e188cbfac", "uuid": "09b45449-5d6e-492c-a68a-cb2e188cbfac",
"attributes": { "attributes": {
"ja3-fingerprint-md5": { "ja3-fingerprint-md5": {
"description": "Hash identifying source", "description": "Hash identifying source",
"misp-attribute": "md5", "misp-attribute": "ja3-fingerprint-md5",
"ui-priority": 1 "ui-priority": 1
}, },
"description": { "description": {