FATT (fingerprintAllTheThings) is a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic. A script for extracting network metadata and fingerprints such as JA3 and HASSH from packet capture files (pcap) or live network traffic. The main use-case is for monitoring honeypots, but you can also use it for other use cases …