You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"description": "Description of the JA4+ fingerprint including scope, collection or specific notes which could help an analyst to reproduce the calculation.",
5
+
"misp-attribute": "text",
6
+
"ui-priority": 1
7
+
},
8
+
"ip-src": {
9
+
"description": "IP address related to this JA4+ fingerprint.",
10
+
"misp-attribute": "ip-src",
11
+
"ui-priority": 1,
12
+
"multiple": true
13
+
},
14
+
"ja4-type": {
15
+
"description": "One of the JA4+ type expressed as short name.",
16
+
"misp-attribute": "text",
17
+
"ui-priority": 1,
18
+
"sane_default": [
19
+
"JA4",
20
+
"JA4S",
21
+
"JA4H",
22
+
"JA4L",
23
+
"JA4X",
24
+
"JA4SSH",
25
+
"JA4T",
26
+
"JA4TS",
27
+
"JA4TScan"
28
+
]
29
+
},
30
+
"ja4-fingerprint": {
31
+
"description": "A JA4+ fingerprint as defined by the JA4+ standard in textual format.",
32
+
"misp-attribute": "text",
33
+
"ui-priority": 1
34
+
}
35
+
},
36
+
"description": "JA4 is a technique for creating network fingerprints that are easy to produce and can be easily shared for threat intelligence. https://github.com/FoxIO-LLC/ja4/blob/main/technical_details/README.md",
0 commit comments