Browser Extension to enable Filtering & Desktop Notifications for Sentinel — Toggle with ALT+A . ALT+C to access config.
Senti Buddy Extension
A Companion Chrome Browser Extension for Microsoft Sentinel that enables Desktop Notifications, Queue Filtering, and quick-hand OSINT tools
The extension will give desktop notifications and provide advanced filtering capabilities for incidents in the queue. This extension is useful for multitaskers allowing analysts to stay up to date with the queue even when it is not immediately in sight. Additionally the filtering capabilities allow for a much cleaner queue allowing in the individual to filter out incidents not relevant to the analyst.
Additionally the extension now provides basic OSINT support allowing you to search an IP or hash quickly from your clipboard. You can also defang all urls from your clipboard
As of 3.0 has experimental support for note taking functionality
Read more
The extension will give desktop notifications and provide advanced filtering capabilities for incidents in the queue. This extension is useful for multitaskers allowing analysts to stay up to date with the queue even when it is not immediately in sight. Additionally the filtering capabilities allow for a much cleaner queue allowing in the individual to filter out incidents not relevant to the analyst.
Additionally the extension now provides basic OSINT support allowing you to search an IP or hash quickly from your clipboard. You can also defang all urls from your clipboard
As of 3.0 has experimental support for note taking functionality
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Senti Buddy", "version": "3.0.1", "description": "Browser Extension to enable Filtering & Desktop Notifications for Sentinel \u2014 Toggle with ALT+A . ALT+C to access config.", "author": { "email": "[email protected]" }, "options_ui": { "page": "options.html", "open_in_tab": false }, "manifest_version": 3, "permissions": [ "activeTab", "notifications", "tabs", "clipboardRead", "storage", "favicon" ], "action": { "default_popup": "popup.html" }, "commands": { "toggle-queue-filtering": { "description": "Activate extension", "suggested_key": { "default": "Alt+A", "mac": "Command+Shift+A" } }, "search-ip": { "description": "Search an IP", "suggested_key": { "default": "Alt+P", "mac": "Command+Shift+P" } }, "search-hash": { "description": "Search Hash", "suggested_key": { "default": "Alt+H", "mac": "Command+Shift+H" } }, "open-config": { "description": "Modify Configurations", "suggested_key": { "default": "Alt+C", "mac": "Command+Shift+C" } } }, "content_scripts": [ { "matches": ["https://portal.azure.com/*", "https://api.abuseipdb.com/*", "https://www.virustotal.com/*", "https://api11.scamalytics.com/*"], "css": ["css/core.css"], "js": ["core.js", "scripts/timer-script.js", "scripts/stats.js"], "run_at": "document_end", "all_frames": true } ], "background": { "service_worker": "service_worker.js" }, "web_accessible_resources": [ { "resources": [ "_favicon/*", "options.html", "popup.html", "note_gen/*"], "matches": ["https://portal.azure.com/*","https://api.abuseipdb.com/*", "https://www.virustotal.com/*", "https://api11.scamalytics.com/*"], "extension_ids": ["*"] } ], "icons": { "16": "icon.png", "38": "icon.png", "48": "icon.png" } }
Read more