TLDR InfoSec · STRATEGIES & TACTICS
ALL YOU NEED TO KNOW ABOUT JA3 & JA4 FINGERPRINTS
Summary from the TLDR InfoSec newsletter
JA3 and JA4 are both methods for building a client fingerprint from the TLS Client Hello. JA4 adds functionality and human readability and is harder for threat actors to change. Both fingerprints can be effective in threat hunting or monitoring.