https://docs.mitigator.ru/v26.04/en/tags/ja3/ Recent content in Ja3 on BIFIT Mitigator Hugo -- gohugo.io en https://docs.mitigator.ru/v26.04/en/psg/psg-analysis/tls/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/psg/psg-analysis/tls/ TLS Analyzer accepts PCAP or a text file as input. JA3 fingerprints are extracted from PCAP and additional information is displayed. Text files analysis allows you to match JA3 hash, JA3 fullstring or User-Agent. For example, you can get JA3 hash and User-Agent list by uploading JA3 fullstring. And if the User-Agent value is entered, then the search will be performed for records that have such a substring in the User-Agent. https://docs.mitigator.ru/v26.04/en/kb/ss-feeds/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/kb/ss-feeds/ The MITIGATOR team generates regularly updated reputational lists of IP addresses, autonomous systems and JA3 fingerprints (hereinafter referred to as “feeds”). Feeds can be imported into MITIGATOR as named lists and used in countermeasures and routing rules. To do this you need to specify Mitigator feeds as a source type. To do this, specify Mitigator feeds as the named list source type and select the required feed. Feeds cannot be downloaded or viewed, even through the MITIGATOR Web interface.