SOC Prime’s open-source browser extension for more efficient threat hunting with one UI for different SIEMs/EDRs

Latest Version

Version
1.4.5
Update
March 26, 2024
Size
349KiB
Developer
Category
Users
109
Rating
4.63636 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
WebRequest
Storage
See more

The Prime Hunt Extension

The Prime Hunt is a browser extension designed for threat hunting and developed as an open-source project on GitHub (https://github.com/socprime/the-prime-hunt). It's licensed under the Apache License version 2.0. The Prime Hunt introduces a One UI idea to simplify and speed up the investigation process regardless of the SIEMs or EDR in use. This is useful both for threat hunters starting off their careers and for seasoned professionals. The former can master the different security platforms and query languages faster, learning the right methodology from the very beginning, while the latter benefit from a streamlined workflow.
One UI for different technologies mirrors the concept of Sigma as a single language for cybersecurity. Sigma rules can be translated into multiple platform formats. This extension helps any threat hunter easily run and tune Sigma rule translations in those platforms, ensuring the community is Sigma-enabled. Meanwhile, sharing query hits (coming soon) helps the entire community measure and consolidate the MITRE ATT&CK® technique prevalence and rule quality.
With The Prime Hunt, you can easily see what accounts and assets are affected by the suspicious activity your query detects. Filter for or filter out query results by any field values with one click or look for all events related to them. Easily drill down to any CTI or any other sources that can help you in the investigation
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "version": "1.4.5", "description": "__MSG_extension_description__", "name": "__MSG_extension_name__", "default_locale": "en", "manifest_version": 3, "icons": { "16": "icons/16.png", "48": "icons/48.png", "64": "icons/64.png", "96": "icons/96.png", "128": "icons/128.png", "256": "icons/256.png", "512": "icons/512.png" }, "content_scripts": [ { "matches": [ "https://*/*" ], "all_frames": true, "js": [ "content.js" ], "run_at": "document_end" } ], "permissions": [ "webRequest", "storage" ], "host_permissions": [ "" ], "web_accessible_resources": [ { "resources": [ "inline-microsoft-sentinel.js", "inline-microsoft-sentinel-pages.js", "inline-microsoft-defender.js", "inline-splunk.js", "inline-qradar.js", "inline-elastic.js", "inline-arcsight.js", "inline-amazon-athena.js", "inline-opensearch.js", "inline-logscale.js", "inline-chronicle.js", "app-styles.css" ], "matches": [ "" ] } ], "action": { "default_icon": { "16": "icons/16.png", "48": "icons/48.png", "64": "icons/64.png", "96": "icons/96.png", "128": "icons/128.png", "256": "icons/256.png", "512": "icons/512.png" } }, "background": { "service_worker": "background.js" }}
Read more

How to download and manually install The Prime Hunt extension for Chrome

Looking for a way to install The Prime Hunt extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install The Prime Hunt extensions manually, this article outlines two simple methods to effortlessly install The Prime Hunt extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download The Prime Hunt extension and manually install through Drag &Drop

If you ever need to manually install a The Prime Hunt extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the The Prime Hunt Extension by clicking the "Download CRX" button on the website.

Look for the The Prime Hunt extension you wish to install. Go to the website and download the The Prime Hunt extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for The Prime Hunt extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the The Prime Hunt extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download The Prime Hunt extension for Chrome and install in Developer Mode

This is another method to install The Prime Hunt extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the The Prime Hunt extension file

Select and download the The Prime Hunt extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the The Prime Hunt extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your The Prime Hunt extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the The Prime Hunt extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install The Prime Hunt extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

OSINT Angel Extension · Productivity 109 0 ★ 29.48KiB

icon

Faro Extension · Productivity 109 2 ★ 341KiB

icon

SOCMaster Extension · Productivity 109 2 ★ 493KiB

icon

Automod Fighter Extension · Social & Communication 109 9 ★ 62.24KiB

icon

SOC Multi-tool Extension · Productivity 109 5 ★ 10.69KiB

icon

rule5 Extension · Productivity 109 3 ★ 4.16MiB

icon

Vehichaul Importer Extension · Productivity 109 0 ★ 75.93KiB

icon

Risk Intelligence Web Extension Extension · Productivity 109 1 ★ 585KiB

icon

WebEdit Pro Extension · Productivity 109 2 ★ 311KiB

icon

GPT Privacy: Anonymize your Chat GPT prompts Extension · Productivity 109 1 ★ 805KiB

icon

Linqbase - LinkedIn CRM & Outreach Extension · Productivity 109 4 ★ 2.13MiB

icon

Hull University Buddy Extension · Productivity 109 7 ★ 1.98MiB

icon

Cyware Threat Intel Crawler Extension · Developer Tools 109 9 ★ 971KiB

icon

ATT&CK Powered Suit Extension · Productivity 109 10 ★ 3.48MiB

icon

Simple Bookmarks Manager Extension · Productivity 109 1 ★ 60.96KiB

icon

ThreatQ Extension Extension · Productivity 109 1 ★ 1.71MiB

icon

ThreatConnect Intelligence Anywhere Extension · Productivity 109 1 ★ 1.34MiB

icon

JobJette - Free AI Job Search Copilot Extension · Productivity 109 1 ★ 1.2MiB

icon

Revvable Browser Extension Extension · Productivity 109 2 ★ 2.63MiB

icon

Pulsedive Threat Intelligence Extension · Productivity 109 30 ★ 18.48MiB

icon

Investigate with Lacework Extension · Productivity 109 0 ★ 17.45KiB

icon

CrowdScrape Extension · Developer Tools 109 10 ★ 707KiB

icon

PassHub.net Extension · Productivity 109 6 ★ 167KiB

icon

Sputnik Extension · Productivity 109 13 ★ 14.14KiB

User reviews

icon

Veronika Telychko (ID: 000000d3eb358f80) Voted 5 ★ - Updated 02/16/2023 Works like a charm directly in your browser, a really powerful & handy tool for threat hunting no matter your SIEM or EDR.

icon

Daryna Olyniychuk (ID: 000000f63f059ec2) Voted 5 ★ - Updated 02/16/2023 Amazing! Turned out to be a usefull accelerator for hunting.

icon

Till Jäger (ID: 0000002e61106c15) Voted 5 ★ - Updated 02/16/2023 This makes life so much easier. It turns the browser based SIEM UI into a fully fletched Hunting Console. Those Guys do amazing work.

icon

Артур (ID: 000000e45fe80052) Voted 5 ★ - Updated 02/16/2023 Awesome! This is what I have been looking for for the past months.

icon

Andrey B (ID: 00000086468ae338) Voted 5 ★ - Updated 02/16/2023 makes work easier