This alert triggers when a malicious JA3/JA3S signature is detected in TLS traffic, both client-side and server-side.
