Cisco Threat Response Casebook (beta)

Casebook and Investigation Widgets

Wat is Cisco Threat Response Casebook (beta)?

Cisco Threat Response Casebook (beta) is een Chrome-extensie ontwikkeld door Cisco XDR, en de belangrijkste functie is "Casebook and Investigation Widgets".

Extensie Screenshots

screenshot

Download het CRX-bestand van de extensie Cisco Threat Response Casebook (beta)

Download Cisco Threat Response Casebook (beta)-extensiebestanden in crx-indeling, installeer Chrome-extensies handmatig in de browser of deel de crx-bestanden met vrienden om Chrome-extensies eenvoudig te installeren.

Instructies voor het Gebruik van de Extensie

                        Once installed, please visit your region's Threat Response API Clients page to create Casebook client credentials. In order for the casebook extension to function, you must select ALL SCOPES when adding your new API Client.
- NAM: https://visibility.amp.cisco.com/#/settings/oauth
- EU: https://visibility.eu.amp.cisco.com/#/settings/oauth
- APJC: https://visibility.apjc.amp.cisco.com/#/settings/oauth

The Cisco Threat Response Casebook is a powerful and convenient tool provided by Threat Response for saving, sharing, and enriching your threat analysis. Use cases for tracking notes and other bits and pieces of information as you follow leads in Threat Response. You can add observables and notes as you pursue your quarry. 

Along with the Casebook, you'll be able to find and inspect observables through the browser's context menu. Select text on a page, or select a single observable, open the context menu and choose the Cisco Threat Response menu option. The selection will be inspected for observables and you'll be presented with information and actions to help with your investigations.

You can also launch an investigation on a single observable quickly by typing "ctr [space]" in the URL bar then typing or pasting an observable.                    

Basisinformatie over de Extensie

Naam Cisco Threat Response Casebook (beta) Cisco Threat Response Casebook (beta)
ID himjbijchjdfcpnihaajckmjlignpkmh
Officiële URL https://chromewebstore.google.com/detail/cisco-threat-response-cas/himjbijchjdfcpnihaajckmjlignpkmh
Beschrijving Casebook and Investigation Widgets
Bestandsgrootte 383 KB
Aantal Installaties 2,888
Huidige Versie 0.9.6
Laatst Bijgewerkt 2020-10-01
Publicatiedatum 2020-01-30
Beoordeling 4.70/5 Totaal 53 Beoordelingen
Ontwikkelaar Cisco XDR
E-mail [email protected]
Betalingswijze free
URL van de Privacybeleid Pagina https://trustportal.cisco.com/c/r/ctp/trust-portal.html
Ondersteunde Talen en-US
manifest.json
{
    "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
    "manifest_version": 2,
    "name": "Cisco Threat Response Casebook (beta)",
    "description": "Casebook and Investigation Widgets",
    "version": "0.9.6",
    "browser_action": {
        "default_popup": "index.html",
        "default_title": "Cisco Threat Response Casebook",
        "default_icon": {
            "16": "img\/casebook16.png",
            "48": "img\/casebook48.png",
            "128": "img\/casebook128.png"
        }
    },
    "permissions": [
        "activeTab",
        "contextMenus",
        "storage",
        "https:\/\/visibility.int.iroh.site\/",
        "https:\/\/private.intel.int.iroh.site\/",
        "https:\/\/visibility.test.iroh.site\/",
        "https:\/\/private.intel.test.iroh.site\/",
        "https:\/\/visibility.apjc.amp.cisco.com\/",
        "https:\/\/private.intel.apjc.amp.cisco.com\/",
        "https:\/\/visibility.eu.amp.cisco.com\/",
        "https:\/\/private.intel.eu.amp.cisco.com\/",
        "https:\/\/visibility.amp.cisco.com\/",
        "https:\/\/private.intel.amp.cisco.com\/"
    ],
    "icons": {
        "16": "img\/casebook16.png",
        "48": "img\/casebook48.png",
        "128": "img\/casebook128.png"
    },
    "omnibox": {
        "keyword": "ctr"
    },
    "background": {
        "scripts": [
            "js\/config\/config.js",
            "js\/lib\/ats-integrations-extension.js",
            "js\/requests.js",
            "js\/background.js"
        ]
    },
    "content_scripts": [
        {
            "run_at": "document_idle",
            "matches": [
                "*:\/\/*\/*",
                "https:\/\/*\/*",
                "file:\/\/*\/*"
            ],
            "js": [
                "js\/lib\/tether.min.js",
                "js\/inject.js"
            ]
        }
    ],
    "web_accessible_resources": [
        "js\/lib\/ats-integrations-extension.js",
        "js\/config\/config.js",
        "html\/widget.html"
    ]
}