Profiling and Detecting All Things SSL with JA3

Explore the capabilities and applications of JA3, an open source SSL/TLS client fingerprinting tool, in this comprehensive conference talk. Discover how to leverage SSL fingerprinting for enhanced detection and response operations, including identifying SSL malware on networks without SSL interception. Learn about the newly introduced JA3S for SSL server fingerprinting, enabling detection of specific C2 servers. Gain insights from industry experts John Althouse and Jeff Atkinson on implementing these techniques to strengthen your cybersecurity defenses against SSL-based threats.