JA3

GPTKB entity

Statements (26)
Predicate Object
gptkbp:instanceOf TLS fingerprinting method
gptkbp:capturedBy gptkb:Elliptic_Curves
Extensions
Cipher Suites
Elliptic Curve Formats
SSL version
TLS Client Hello parameters
gptkbp:category cybersecurity
network security
gptkbp:developedBy gptkb:Salesforce
gptkbp:format 32-character hexadecimal string
https://www.w3.org/2000/01/rdf-schema#label JA3
gptkbp:introducedIn 2017
gptkbp:limitation can be spoofed
does not inspect encrypted payload
gptkbp:namedAfter MD5 hash of TLS handshake parameters
gptkbp:openSource true
gptkbp:relatedTo gptkb:JA3S
TLS fingerprinting
gptkbp:repository https://github.com/salesforce/ja3
gptkbp:usedBy threat intelligence platforms
malware researchers
network security analysts
gptkbp:usedFor identifying clients in TLS handshakes
gptkbp:bfsParent gptkb:Suricata
gptkbp:bfsLayer 7