This appears to be complementary to their other TLS fingerprinting project, JA3. Where JARM quickly scans servers for TLS configuration, JA3 sniffs network traf

This appears to be complementary to their other TLS fingerprinting project, JA3. Where JARM quickly scans servers for TLS configuration, JA3 sniffs network traffic to fingerprint client/server TLS handshakes. I wonder what research is happening at Salesforce to create these byproducts.