topic Can be into Cortex XDR ingested JA3 hashes in Cortex XDR Discussions https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-be-into-cortex-xdr-ingested-ja3-hashes/m-p/555806#M5059 <P>Hi,<BR />I would like to check whether there is a way how customer can ingest IOC in form of the JA3 hashes into XDR?</P> <P>thanks</P> <P>Ondrej</P> Wed, 30 Aug 2023 06:53:01 GMT Ondrej_Remes 2023-08-30T06:53:01Z Can be into Cortex XDR ingested JA3 hashes https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-be-into-cortex-xdr-ingested-ja3-hashes/m-p/555806#M5059 <P>Hi,<BR />I would like to check whether there is a way how customer can ingest IOC in form of the JA3 hashes into XDR?</P> <P>thanks</P> <P>Ondrej</P> Wed, 30 Aug 2023 06:53:01 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-be-into-cortex-xdr-ingested-ja3-hashes/m-p/555806#M5059 Ondrej_Remes 2023-08-30T06:53:01Z Re: Can be into Cortex XDR ingested JA3 hashes https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-be-into-cortex-xdr-ingested-ja3-hashes/m-p/555888#M5061 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/228875">@Ondrej_Remes</a>&nbsp;</P> <P>&nbsp;</P> <P>Thanks for reaching out on LiveCommuity!</P> <P>Unfortunately there is no way to add JA3 hashes as IOCs and Cortex XDR do not utilise JA3 hashes for detection.</P> Wed, 30 Aug 2023 17:21:21 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-be-into-cortex-xdr-ingested-ja3-hashes/m-p/555888#M5061 nsinghvirk 2023-08-30T17:21:21Z