A Chrome Extension to give an analyst integration capabilities on any browser page, with ThreatQ
ThreatQ Extension Extension
The ThreatQ Chrome Extension gives analysts a quick and easy to use assistant while navigating web pages. The extension will allow analysts to perform quick lookups, automatically extract information from web pages, and ultimately, conduct thorough investigations.
Analysts will be able to quickly identify key pieces threat intelligence from web pages, and immediately figure out if they are relevant to their threat hunt or investigation. Additional context can be added to tracked threat objects and can be synced directly with a ThreatQ instance. Reports can be built directly from web pages and imported into ThreatQ, along with any relevant attribution, tags, and relationships.
The extension will be able to assist analysts in numerous ways, making them more efficient by giving them the tools they need to do their work.
Read more
Analysts will be able to quickly identify key pieces threat intelligence from web pages, and immediately figure out if they are relevant to their threat hunt or investigation. Additional context can be added to tracked threat objects and can be synced directly with a ThreatQ instance. Reports can be built directly from web pages and imported into ThreatQ, along with any relevant attribution, tags, and relationships.
The extension will be able to assist analysts in numerous ways, making them more efficient by giving them the tools they need to do their work.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "ThreatQ Extension", "description": "A Chrome Extension to give an analyst integration capabilities on any browser page, with ThreatQ", "version": "1.1.0", "action": { "default_icon": "logo_32.png", "default_title": "ThreatQ Extension", "default_popup": "popup.html" }, "background": { "service_worker": "js/index.js", "type": "module" }, "icons": { "32": "logo_32.png", "48": "logo_48.png", "64": "logo_64.png", "128": "logo_128.png", "500": "logo_500.png" }, "cross_origin_embedder_policy": { "value": "require-corp" }, "cross_origin_opener_policy": { "value": "same-origin" }, "permissions": [ "contextMenus", "activeTab", "tabs", "notifications", "scripting", "clipboardWrite" ], "host_permissions": [ "https://*/*", "" ], "content_security_policy": { "extension_pages": "default-src 'self'; script-src 'self'; connect-src http://*:* https://*:*; style-src * 'unsafe-inline' 'self' blob:; img-src 'self' data:;" }}
Read more