CB Response: Is it Possible to Add JA3 Hash to Netconns for SSL/TLS Fingerprinting?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is it possible to add JA3 hash to netconns for SSL/TLS fingerprinting?

Environment

• CB Response Sensor: All Versions
• SSL/TLS 

Resolution

Feature Request has been created to add JA3 hash to netconns for SSL/TLS fingerprinting.

 

Additional Information

https://community.carbonblack.com/t5/Idea-Central/Add-JA3-hash-to-netconns-for-SSL-TLS-fingerprinting/idi-p/82892#M9040