FoxIO Blog

• JA4T: TCP Fingerprinting

  And How to Use It to Block Over 80% of Internet Scan Traffic TL;DR JA4T/S/Scan are the latest additions to the JA4+ family of network fingerprinting tools. These tools add the ability to fingerprint client and server operating systems, devices, particular applications, hosting characteristics, and even if a connection is...

  Apr 23, 2024 • John Althouse

  

• JA4+ Network Fingerprinting

  TL;DR In this blog I go over the new JA4+ network fingerprinting methods and examples of what they can detect. JA4+ provides a suite of modular network fingerprints that are easy to use and easy to share, replacing the JA3 TLS fingerprinting standard from 2017. These methods are both human...

  Sep 26, 2023 • John Althouse

  

• Cut SIEM & AI cost by 80% with LogSlash & cwolves

  In this blog, I go over how the LogSlash method has evolved over the last few months and new technologies that it is being implemented into. I’ll also explain how LogSlash can significantly reduce the cost to send data to SIEMs as well as train AI on transactional data. TL;DR...

  Jun 15, 2023 • John Althouse

  

• Introducing LogSlash and the End of Traditional Logging

  LogSlash is a new standard method that doubles the efficiency and value of existing log platforms by doubling capacity and cutting logging costs in half. It does this by performing a time-window-based, intelligent reduction of logs in transit. LogSlash was created by John Althouse, who led the creation of standard...

  Jan 21, 2023 • John Althouse