Device Detection
Detect network devices by analyzing traffic.
User Agents
A User Agent (UA) text string identifies the software making a web request in HTTP. For example, a browser may identify as a particular version of Chrome.
List view displays:
| Column | About |
|---|---|
| User Agent | The exact text string of the UA |
| Device | Device type assigned to the UA |
| App | Application type assigned to the UA |
Click the User Agent name link to view an individual User Agent record.
User Agent Record View
| Parameter | About |
|---|---|
| Device | The Device Type contained in the UA |
| Application | The Application contained in the UA |
| OS | The Operating System contained in the UA |
| Canonical ID | The globally-unique identifier in the DrawBridge ecosystem |
| Device Type | The device type assigned to the UA |
| Application Type | The Application type assigned to the UA |
User Agent Record header buttons:
- Add a new User Agent record with the blue + Create User Agent Record button
- Edit this User Agent record with the green pencil Update User Agent Record button
- Delete this User Agent record with the red trashcan Delete User Agent Record button
- Bookmark this User Agent record with the blue ribbon Bookmark This Page button
Ja3 Hashes
Ja3 hashes can be used to positively identify an application based on a TLS fingerprint. Read more about the standard on the official Github page.
List view displays:
| Column | About |
|---|---|
| Hash | Ja3 Hash |
| Notes | Information about the hash |
Ja3 Hash Record View
| Parameter | About |
|---|---|
| Name | Exact Ja3 hash |
| Notes | Further information about this particular hash |
| Canonical ID | Globally-unique record identifier in the DrawBridge ecosystem |
List: Application -- displays Applications associated with this particular Ja3 hash.
Add an Application to the hash record with the Add TLS Fingerprint button above the Application list view in the record.
**Ja3 Hash Record header buttons:
- Add a new Ja3 Hash record with the blue + Create J A3 Hash button
- Edit this Ja3 Hash record with the green pencil Update J A3 Hash button
- Delete this Ja3 Hash record with the red trashcan Delete J A3 Hash button
- Bookmark this Ja3 Hash record with the blue ribbon Bookmark This Page button
- Sync menu (blue chain icon)
- Create on Sync Publisher: Push this record to the Sync Server
Devices
Specific hardware identity records.
List view displays:
| Column | About |
|---|---|
| Model | The model of the Device |
| Brand | The manufacturer of the Device |
| Type | The device type, eg. Smartphone, Desktop PC, and so forth |
Locate a specific record with the following search/select fields:
- Name
Device record view
| Parameter | About |
|---|---|
| Name | Name of the specific hardware |
| Type | Device type, eg. Smartphone, Desktop PC, and so forth |
| OS | Operating System of the Device |
| Canonial ID | Globally-unique record identifier in the DrawBridge ecosystem |
| Brand | Manufacturer of the Device |
Device Record header buttons:
- Add a new Device record with the blue + Create Device button
- Edit this Device record with the green pencil Update Device button
- Delete this Device record with the red trashcan Delete Device button
- Bookmark this Device record with the blue ribbon Bookmark This Page button
- Sync menu (blue chainlink icon)
- 2 Way - Push / Pull from Server: call a sync run for this record
- Push to Sync Publisher: send this record to the sync server
- Pull from Sync Publisher: fetch this record from the sync server
- Mark to Resync: flag this record for inclusion in the next sync server run
Applications
Comprehensive listing of Mobile Device and Desktop applications
List view displays:
| Column | About |
|---|---|
| Name | Name of the Application |
| Type | Type of application, if known. Eg. Browser, Mobile App, and so forth |
Locate a specific record with the following search/select fields:
- Name
Application record view
| Parameter | About |
|---|---|
| Name | Name of the Application |
| Type | Type of application, if known. Eg. Browser, Mobile App, and so forth |
| Canonial ID | Globally-unique record identifier in the DrawBridge ecosystem |
Application Record header buttons:
- Add a new Application record with the blue + Create Application button
- Edit this Application record with the green pencil Update Application button
- Delete this Application record with the red trashcan Delete Application button
- Bookmark this Application record with the blue ribbon Bookmark This Page button
- Sync menu (blue chainlink icon)
- 2 Way - Push / Pull from Server: call a sync run for this record
- Push to Sync Publisher: send this record to the sync server
- Pull from Sync Publisher: fetch this record from the sync server
- Mark to Resync: flag this record for inclusion in the next sync server run
Informational Tabs
-
App Store IDs -- List view of unique App Store identifiers; Add an ID with the
Add App Store IDbutton above the list -
UA Patterns -- List view of User Agent regular expressions to match this Application; Add a UA pattern with the
Add UA Patternbutton -
JA3 Hashes -- List view of Ja3 Hashes of this Application; add a new hash with the
Add TLS Fingerprintbutton - User Agents -- List view of User Agent strings associated with this Application
Applications (ACL-ready)
Accessed as a sub-menu item under Applications in the left sidebar menu.
Appstore IDs
Accessed as a sub-menu item under Applications in the left sidebar menu.