alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Onyphe 🇫🇷 CLI 🌐"; flow:to_server, stateless; ja3.hash; content:"f1b9b751b665449f1ce77721b0487b69"; tls.sni; content:"www.onyphe.io"; metadata:former_category JA3; reference:url,https://beta.onyphe.io/docs/cli/installation; metadata:created_at 2023_03_27, updated_at 2023_03_27; sid:3300180; rev:1; classtype:policy-violation;)