Qu'est-ce que The Prime Hunt ?

The Prime Hunt est une extension Chrome développée par SOC Prime Inc., et sa fonction principale est "SOC Prime’s open-source browser extension for more efficient threat hunting with one UI for different SIEMs/EDRs".

Captures d'Écran de l'Extension

Télécharger le fichier CRX de l'extension The Prime Hunt

Téléchargez les fichiers d'extension The Prime Hunt au format crx, installez manuellement les extensions Chrome dans le navigateur ou partagez les fichiers crx avec des amis pour installer facilement les extensions Chrome.

Instructions d'Utilisation de l'Extension

The Prime Hunt is a LGPL browser extension for threat hunting developed as an open-source project on GitHub (https://github.com/socprime/the-prime-hunt). The Prime Hunt introduces a One UI idea to simplify and speed up the investigation process regardless of the SIEMs or EDR in use. This is useful both for threat hunters starting off their careers and for seasoned professionals. The former can master the different security platforms and query languages faster, learning the right methodology from the very beginning, while the latter benefit from a streamlined workflow.
One UI for different technologies mirrors the concept of Sigma as a single language for cybersecurity. Sigma rules can be translated into multiple platform formats. This extension helps any threat hunter easily run and tune Sigma rule translations in those platforms, ensuring the community is Sigma-enabled. Meanwhile, sharing query hits (coming soon) helps the entire community measure and consolidate the MITRE ATT&CK® technique prevalence and rule quality.
With The Prime Hunt, you can easily see what accounts and assets are affected by the suspicious activity your query detects. Filter for or filter out query results by any field values with one click or look for all events related to them. Easily drill down to any CTI or any other sources that can help you in the investigation

Informations de Base sur l'Extension

Nom	The Prime Hunt
ID	jgelecjbbjlmghiejapgafechokhpmcc
URL Officiel	https://chromewebstore.google.com/detail/the-prime-hunt/jgelecjbbjlmghiejapgafechokhpmcc
Description	SOC Prime’s open-source browser extension for more efficient threat hunting with one UI for different SIEMs/EDRs
Taille du Fichier	390 KB
Nombre d'Installations	113
Version Actuelle	1.4.2
Dernière Mise à Jour	2024-02-05
Date de Publication	2023-02-11
Évaluation	5.00/5 Total 9 Évaluations
Développeur	SOC Prime Inc.
Email	[email protected]
Type de Paiement	free
Site Web de l'Extension	https://socprime.com
URL de la Page d'Aide	https://github.com/socprime/the-prime-hunt
Langues Prises en Charge	en
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "version": "1.4.2", "description": "__MSG_extension_description__", "name": "__MSG_extension_name__", "default_locale": "en", "manifest_version": 3, "icons": { "16": "icons\/16.png", "48": "icons\/48.png", "64": "icons\/64.png", "96": "icons\/96.png", "128": "icons\/128.png", "256": "icons\/256.png", "512": "icons\/512.png" }, "content_scripts": [ { "matches": [ "https:\/\/\/" ], "all_frames": true, "js": [ "content.js" ], "run_at": "document_end" } ], "permissions": [ "webRequest", "storage" ], "host_permissions": [ "" ], "web_accessible_resources": [ { "resources": [ "inline-microsoft-sentinel.js", "inline-microsoft-defender.js", "inline-splunk.js", "inline-qradar.js", "inline-elastic.js", "inline-arcsight.js", "inline-amazon-athena.js", "inline-opensearch.js", "inline-logscale.js", "inline-chronicle.js", "app-styles.css" ], "matches": [ "" ] } ], "action": { "default_icon": { "16": "icons\/16.png", "48": "icons\/48.png", "64": "icons\/64.png", "96": "icons\/96.png", "128": "icons\/128.png", "256": "icons\/256.png", "512": "icons\/512.png" } }, "background": { "service_worker": "background.js" } }