Jump to content

JA4+

From Wikitech
(Redirected from JA4)

JA4+ is a suite of network fingerprinting standards developed by FoxIO to facilitate more effective threat-hunting and analysis.

Full Name Short Name Description
JA4 JA4 TLS Client Fingerprinting
JA4Server JA4S TLS Server Response / Session Fingerprinting
JA4HTTP JA4H HTTP Client Fingerprinting
JA4Latency JA4L Client to Server Latency Measurment / Light Distance
JA4LatencyServer JA4LS Server to Client Latency Measurement / Light Distance
JA4X509 JA4X X509 TLS Certificate Fingerprinting
JA4SSH JA4SSH SSH Traffic Fingerprinting
JA4TCP JA4T TCP Client Fingerprinting
JA4TCPServer JA4TS TCP Server Response Fingerprinting
JA4TCPScan JA4TScan Active TCP Fingerprint Scanner
JA4DHCP JA4D DHCP Fingerprinting
JA4DHCPv6 JA4D6 DHCPv6 Fingerprinting

See also