什麼是Cisco Threat Response Casebook (beta)？

Cisco Threat Response Casebook (beta)是由Cisco XDR開發的Chrome擴展程式，該擴展的主要功能是“Casebook and Investigation Widgets”。

擴展截圖

下載Cisco Threat Response Casebook (beta)擴展crx文件

下載Cisco Threat Response Casebook (beta)擴展crx格式的文件，手動將Chrome擴充功能安裝到瀏覽器中，也可以將crx文件分享給朋友，輕鬆安裝Chrome擴充功能。

擴展使用說明

Once installed, please visit your region's Threat Response API Clients page to create Casebook client credentials. In order for the casebook extension to function, you must select ALL SCOPES when adding your new API Client.
- NAM: https://visibility.amp.cisco.com/#/settings/oauth
- EU: https://visibility.eu.amp.cisco.com/#/settings/oauth
- APJC: https://visibility.apjc.amp.cisco.com/#/settings/oauth

The Cisco Threat Response Casebook is a powerful and convenient tool provided by Threat Response for saving, sharing, and enriching your threat analysis. Use cases for tracking notes and other bits and pieces of information as you follow leads in Threat Response. You can add observables and notes as you pursue your quarry.

Along with the Casebook, you'll be able to find and inspect observables through the browser's context menu. Select text on a page, or select a single observable, open the context menu and choose the Cisco Threat Response menu option. The selection will be inspected for observables and you'll be presented with information and actions to help with your investigations.

You can also launch an investigation on a single observable quickly by typing "ctr [space]" in the URL bar then typing or pasting an observable.

擴展基本資訊

名稱	Cisco Threat Response Casebook (beta)
ID	himjbijchjdfcpnihaajckmjlignpkmh
官方網址	https://chromewebstore.google.com/detail/cisco-threat-response-cas/himjbijchjdfcpnihaajckmjlignpkmh
簡介	Casebook and Investigation Widgets
檔案大小	383 KB
安裝次數	2,888
目前版本	0.9.6
更新時間	2020-10-01
上架時間	2020-01-30
評分	4.70/5 共 53 次評分
開發者	Cisco XDR
電子郵箱	[email protected]
付費類型	free
隱私政策頁面URL	https://trustportal.cisco.com/c/r/ctp/trust-portal.html
支援的語言	en-US
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "manifest_version": 2, "name": "Cisco Threat Response Casebook (beta)", "description": "Casebook and Investigation Widgets", "version": "0.9.6", "browser_action": { "default_popup": "index.html", "default_title": "Cisco Threat Response Casebook", "default_icon": { "16": "img\/casebook16.png", "48": "img\/casebook48.png", "128": "img\/casebook128.png" } }, "permissions": [ "activeTab", "contextMenus", "storage", "https:\/\/visibility.int.iroh.site\/", "https:\/\/private.intel.int.iroh.site\/", "https:\/\/visibility.test.iroh.site\/", "https:\/\/private.intel.test.iroh.site\/", "https:\/\/visibility.apjc.amp.cisco.com\/", "https:\/\/private.intel.apjc.amp.cisco.com\/", "https:\/\/visibility.eu.amp.cisco.com\/", "https:\/\/private.intel.eu.amp.cisco.com\/", "https:\/\/visibility.amp.cisco.com\/", "https:\/\/private.intel.amp.cisco.com\/" ], "icons": { "16": "img\/casebook16.png", "48": "img\/casebook48.png", "128": "img\/casebook128.png" }, "omnibox": { "keyword": "ctr" }, "background": { "scripts": [ "js\/config\/config.js", "js\/lib\/ats-integrations-extension.js", "js\/requests.js", "js\/background.js" ] }, "content_scripts": [ { "run_at": "document_idle", "matches": [ ":\/\/\/", "https:\/\/\/", "file:\/\/\/*" ], "js": [ "js\/lib\/tether.min.js", "js\/inject.js" ] } ], "web_accessible_resources": [ "js\/lib\/ats-integrations-extension.js", "js\/config\/config.js", "html\/widget.html" ] }