SOC Prime’s open-source browser extension for more efficient threat hunting with one UI for different SIEMs/EDRs

Latest Version

Version
1.4.5
Update
March 26, 2024
Size
349KiB
Developer
Category
Users
109
Rating
4.63636 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
WebRequest
Storage
See more

The Prime Hunt Extension

The Prime Hunt is a browser extension designed for threat hunting and developed as an open-source project on GitHub (https://github.com/socprime/the-prime-hunt). It's licensed under the Apache License version 2.0. The Prime Hunt introduces a One UI idea to simplify and speed up the investigation process regardless of the SIEMs or EDR in use. This is useful both for threat hunters starting off their careers and for seasoned professionals. The former can master the different security platforms and query languages faster, learning the right methodology from the very beginning, while the latter benefit from a streamlined workflow.
One UI for different technologies mirrors the concept of Sigma as a single language for cybersecurity. Sigma rules can be translated into multiple platform formats. This extension helps any threat hunter easily run and tune Sigma rule translations in those platforms, ensuring the community is Sigma-enabled. Meanwhile, sharing query hits (coming soon) helps the entire community measure and consolidate the MITRE ATT&CK® technique prevalence and rule quality.
With The Prime Hunt, you can easily see what accounts and assets are affected by the suspicious activity your query detects. Filter for or filter out query results by any field values with one click or look for all events related to them. Easily drill down to any CTI or any other sources that can help you in the investigation
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "version": "1.4.5", "description": "__MSG_extension_description__", "name": "__MSG_extension_name__", "default_locale": "en", "manifest_version": 3, "icons": { "16": "icons/16.png", "48": "icons/48.png", "64": "icons/64.png", "96": "icons/96.png", "128": "icons/128.png", "256": "icons/256.png", "512": "icons/512.png" }, "content_scripts": [ { "matches": [ "https://*/*" ], "all_frames": true, "js": [ "content.js" ], "run_at": "document_end" } ], "permissions": [ "webRequest", "storage" ], "host_permissions": [ "" ], "web_accessible_resources": [ { "resources": [ "inline-microsoft-sentinel.js", "inline-microsoft-sentinel-pages.js", "inline-microsoft-defender.js", "inline-splunk.js", "inline-qradar.js", "inline-elastic.js", "inline-arcsight.js", "inline-amazon-athena.js", "inline-opensearch.js", "inline-logscale.js", "inline-chronicle.js", "app-styles.css" ], "matches": [ "" ] } ], "action": { "default_icon": { "16": "icons/16.png", "48": "icons/48.png", "64": "icons/64.png", "96": "icons/96.png", "128": "icons/128.png", "256": "icons/256.png", "512": "icons/512.png" } }, "background": { "service_worker": "background.js" }}
Read more

Similar Extensions

icon

OSINT Angel Extension · Productivity 109 0 ★ 29.48KiB

icon

Faro Extension · Productivity 109 2 ★ 341KiB

icon

SOCMaster Extension · Productivity 109 2 ★ 493KiB

icon

Automod Fighter Extension · Social & Communication 109 9 ★ 62.24KiB

icon

SOC Multi-tool Extension · Productivity 109 5 ★ 10.69KiB

icon

rule5 Extension · Productivity 109 3 ★ 4.16MiB

icon

Vehichaul Importer Extension · Productivity 109 0 ★ 75.93KiB

icon

Risk Intelligence Web Extension Extension · Productivity 109 1 ★ 585KiB

icon

WebEdit Pro Extension · Productivity 109 2 ★ 311KiB

icon

GPT Privacy: Anonymize your Chat GPT prompts Extension · Productivity 109 1 ★ 805KiB

icon

Linqbase - LinkedIn CRM & Outreach Extension · Productivity 109 4 ★ 2.13MiB

icon

Hull University Buddy Extension · Productivity 109 7 ★ 1.98MiB

icon

Cyware Threat Intel Crawler Extension · Developer Tools 109 9 ★ 971KiB

icon

ATT&CK Powered Suit Extension · Productivity 109 10 ★ 3.48MiB

icon

Simple Bookmarks Manager Extension · Productivity 109 1 ★ 60.96KiB

icon

ThreatQ Extension Extension · Productivity 109 1 ★ 1.71MiB

icon

ThreatConnect Intelligence Anywhere Extension · Productivity 109 1 ★ 1.34MiB

icon

JobJette - Free AI Job Search Copilot Extension · Productivity 109 1 ★ 1.2MiB

icon

Revvable Browser Extension Extension · Productivity 109 2 ★ 2.63MiB

icon

Pulsedive Threat Intelligence Extension · Productivity 109 30 ★ 18.48MiB

icon

Investigate with Lacework Extension · Productivity 109 0 ★ 17.45KiB

icon

CrowdScrape Extension · Developer Tools 109 10 ★ 707KiB

icon

PassHub.net Extension · Productivity 109 6 ★ 167KiB

icon

Sputnik Extension · Productivity 109 13 ★ 14.14KiB

User reviews

icon

Veronika Telychko (ID: 000000d3eb358f80) Voted 5 ★ - Updated 02/16/2023 Works like a charm directly in your browser, a really powerful & handy tool for threat hunting no matter your SIEM or EDR.

icon

Daryna Olyniychuk (ID: 000000f63f059ec2) Voted 5 ★ - Updated 02/16/2023 Amazing! Turned out to be a usefull accelerator for hunting.

icon

Till Jäger (ID: 0000002e61106c15) Voted 5 ★ - Updated 02/16/2023 This makes life so much easier. It turns the browser based SIEM UI into a fully fletched Hunting Console. Those Guys do amazing work.

icon

Артур (ID: 000000e45fe80052) Voted 5 ★ - Updated 02/16/2023 Awesome! This is what I have been looking for for the past months.

icon

Andrey B (ID: 00000086468ae338) Voted 5 ★ - Updated 02/16/2023 makes work easier