get
https://api.platform.censys.io/v3/threat-hunting/host//observations/fingerprints
Retrieve fingerprint observations for a host. You must provide an observation_type, and can optionally filter by port and observation_value. You may also filter or sort by transport_protocol when supported by the selected observation_type. The shared order_by schema includes transport_protocol for the fingerprint family, but requests for observation types whose timelines do not expose transport_protocol will be rejected if they attempt to sort by it.
Capability matrix:
- jarm_fingerprint: port, transport_protocol, observation_value
- jarm_cipher_and_version_fingerprint: port, transport_protocol, observation_value
- jarm_tls_extensions_sha256: port, transport_protocol, observation_value
- ja4tscan_fingerprint: port, observation_value