From ab1f97b881c8d3f0035fe93586053860cc12a33a Mon Sep 17 00:00:00 2001 From: 417190e5c48babc7 <417190e5c48babc7@proton.me> Date: Thu, 20 Jul 2023 10:24:42 +0300 Subject: [PATCH] chg: [ja3s] Add domain and hostname attributes --- objects/ja3s/definition.json | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/objects/ja3s/definition.json b/objects/ja3s/definition.json index e37b883..11c7654 100644 --- a/objects/ja3s/definition.json +++ b/objects/ja3s/definition.json @@ -5,12 +5,22 @@ "misp-attribute": "text", "ui-priority": 1 }, + "domain": { + "description": "Destination domain", + "misp-attribute": "domain", + "ui-priority": 1 + }, "first-seen": { "description": "First seen of the SSL/TLS handshake", "disable_correlation": true, "misp-attribute": "datetime", "ui-priority": 0 }, + "hostname": { + "description": "Destination hostname", + "misp-attribute": "hostname", + "ui-priority": 1 + }, "ip-dst": { "description": "Destination IP address", "misp-attribute": "ip-dst", @@ -46,5 +56,5 @@ "ja3s-fingerprint-md5" ], "uuid": "7f377f66-d128-4b97-897f-592d06ba2ff7", - "version": 4 + "version": 5 } \ No newline at end of file