TLDR InfoSec · STRATEGIES & TACTICS

ALL YOU NEED TO KNOW ABOUT JA3 & JA4 FINGERPRINTS

links.tldrnewsletter.com5 min read

Summary from the TLDR InfoSec newsletter

JA3 and JA4 are both methods for building a client fingerprint from the TLS Client Hello. JA4 adds functionality and human readability and is harder for threat actors to change. Both fingerprints can be effective in threat hunting or monitoring.