Browser extension that enables users to query ThreatConnect, add indicators, and group indicators directly from a supported browser.

Latest Version

Version
3.0.1
Update
August 28, 2023
Size
1.34MiB
Developer
Category
Users
527
Rating
5 ★
Manifest Version
2
Web Store Status
Languages Support
English (United States)
See more
Permissions
Tabs
Storage

See more

ThreatConnect Intelligence Anywhere Extension

ThreatConnect Intelligence Anywhere v3 builds on the capabilities of previous versions with the addition of CAL natural language processing (NLP) that enables you to scan a web page and query the CAL NLP engine for matches on MITRE® ATT&CK® techniques. NLP looks for language that is indicative of MITRE ATT&CK techniques rather than looking for an exact match. When a technique is identified, you can hover over the text for additional insights on that technique and add relevant indicator information to your threat library for future investigations.

Users will also benefit from an updated Browser Extension interface for a more intuitive experience. Updates include ranking Indicators based on ThreatAssess score, a settings menu alphabetized by source, and the ability to filter between Groups and Indicators. With Browser Extension v3, you’ll maximize insights on MITRE ATT&CK techniques without having to track your findings in a spreadsheet.

With Intelligence Anywhere, users can scan an online resource for potential Indicators, query ThreatConnect for information about scan results, and import Indicators and Group Indicators directly into ThreatConnect from a supported web browser.

ThreatConnect Intelligence Anywhere can scan various online resources for potential Indicators, including static and dynamic webpages, social media platforms, Google Docs files, email messages, and even ThreatConnect itself.

Users have the ability to:

Instantaneously access the insight of ThreatConnect at their fingertips, directly from the web browser they’re working from - fewer clicks means less frustration and quicker results.

Immediately leverage the global context from CAL, including classifiers from our analytics, anonymized observations/sightings of IOCs, and trending impressions information.

Quickly import disparate single indicators or batches of unstructured data along with associated source information into ThreatConnect without disrupting their investigative process - simply tag and import as a group when you’re ready.

Increase the value of their threat intelligence program by giving more users access at no additional cost and without the burden of learning and regularly accessing a new system.

In order to use the extension, users must be using a ThreatConnect version 6.7 or later.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "ThreatConnect Intelligence Anywhere", "short_name": "tc-browser-extension", "description": "Browser extension that enables users to query ThreatConnect, add indicators, and group indicators directly from a supported browser.", "manifest_version": 2, "minimum_chrome_version": "0", "version": "3.0.1", "web_accessible_resources": [ "index.html", "/assets/content-scripts/content-styles.css", "assets/icons/favicon-32x32.png" ], "icons": { "512": "/assets/icons/favicon-512x512.png", "192": "/assets/icons/favicon-192x192.png", "128": "/assets/icons/favicon-128x128.png", "32": "/assets/icons/favicon-32x32.png", "16": "/assets/icons/favicon-16x16.png" }, "chrome_url_overrides": {}, "options_ui": { "page": "index.html#/settings" }, "permissions": [ "tabs", "storage", "" ], "browser_action": { "default_icon": "assets/icons/favicon-32x32.png", "default_title": "ThreatConnect Intelligence Anywhere", "default_popup": "index.html#home" }, "content_scripts": [ { "matches": [""], "run_at": "document_end", "js": [ "browser-polyfill.js", "assets/content/main.js", "assets/content-scripts/content-utilities.js", "assets/content-scripts/scan-page.js", "assets/content-scripts/show-results.js", "assets/content-scripts/content-listeners.js" ] } ], "background": { "page": "/assets/background-scripts/background.html" }}
Read more

Similar Extensions

icon

Recorded Future Extension · Productivity 527 20 ★ 667KiB

icon

ScamBlox.io Extension · Social & Communication 527 18 ★ 2.24MiB

icon

Cyware Threat Intel Crawler Extension · Developer Tools 527 9 ★ 971KiB

icon

Risk Intelligence Web Extension Extension · Productivity 527 1 ★ 585KiB

icon

ATT&CK Powered Suit Extension · Productivity 527 10 ★ 3.48MiB

icon

MalwareAI Browser Security Extension · Productivity 527 26 ★ 2.25MiB

icon

Mandiant Advantage | Threat Intelligence Extension · Productivity 527 5 ★ 2.85MiB

icon

Intezer Analyze Extension · Developer Tools 527 7 ★ 437KiB

icon

ThreatQ Extension Extension · Productivity 527 1 ★ 1.71MiB

icon

Anomali Copilot Extension · Productivity 527 5 ★ 4.24MiB

icon

CrowdScrape Extension · Developer Tools 527 10 ★ 707KiB

icon

Investigate with Lacework Extension · Productivity 527 0 ★ 17.45KiB

icon

ThreatPinch Lookup Extension · Productivity 527 25 ★ 3.6MiB

icon

Trellix - IVX CLOUD Extension · Productivity 527 8 ★ 748KiB

icon

Pulsedive Threat Intelligence Extension · Productivity 527 30 ★ 18.48MiB

icon

OAPivot Extension · Productivity 527 0 ★ 12.2KiB

icon

Threat Analytics Search Extension · Productivity 527 17 ★ 5.75MiB

icon

Sputnik Extension · Productivity 527 13 ★ 14.14KiB

icon

BrowserWall Extension · Productivity 527 7 ★ 654KiB

icon

SOC Multi-tool Extension · Productivity 527 5 ★ 10.69KiB

icon

OSIRIS: OSINT Reputation Intelligent Search Extension · Productivity 527 2 ★ 10.79KiB

icon

Farsight DNSDB Scout® Extension · Productivity 527 4 ★ 1.42MiB

icon

Perceptual image analysis Extension · Productivity 527 1 ★ 78.98KiB

icon

OSINT=* Extension · Productivity 527 5 ★ 279KiB

User reviews

icon

William Moore (ID: 00000029cd875d3a) Voted 5 ★ - Updated 10/21/2021 Fantastic productivity gains. I can scan any page and get IOC's with reputation into my TIP platform.