Firefox 浏览器附加组件
  • 扩展
  • 主题
    • 适用于 Firefox
    • 字典和语言包
    • 其他浏览器网站
    • 适用于 Android 的附加组件
登录
The Prime Hunt 预览

The Prime Hunt 作者: SOC Prime, Inc.

SOC Prime’s open-source browser extension for more efficient threat hunting with one UI for different SIEMs/EDRs

0 (0 reviews)0 (0 reviews)
4 个用户4 个用户
您需要 Firefox 来使用此扩展
下载 Firefox 并安装扩展
下载文件

扩展元数据

关于此扩展
The Prime Hunt is a browser extension designed for threat hunting and developed as an open-source project on GitHub (https://github.com/socprime/the-prime-hunt). It's licensed under the Apache License version 2.0. The Prime Hunt introduces a One UI idea to simplify and speed up the investigation process regardless of the SIEMs or EDR in use. This is useful both for threat hunters starting off their careers and for seasoned professionals. The former can master the different security platforms and query languages faster, learning the right methodology from the very beginning, while the latter benefit from a streamlined workflow.
One UI for different technologies mirrors the concept of Sigma as a single language for cybersecurity. Sigma rules can be translated into multiple platform formats. This extension helps any threat hunter easily run and tune Sigma rule translations in those platforms, ensuring the community is Sigma-enabled. Meanwhile, sharing query hits (coming soon) helps the entire community measure and consolidate the MITRE ATT&CK® technique prevalence and rule quality.
With The Prime Hunt, you can easily see what accounts and assets are affected by the suspicious activity your query detects. Filter for or filter out query results by any field values with one click or look for all events related to them. Easily drill down to any CTI or any other sources that can help you in the investigation.
评分 0(1 位用户)
登录以评价此扩展
目前尚无评分

已保存星级评分

5
0
4
0
3
0
2
0
1
0
尚无评价
权限与数据详细了解

必要权限:

  • 访问您在所有网站的数据
更多信息
附加组件链接
  • 用户支持网站
  • 支持邮箱
版本
1.4.5
大小
365.14 KB
上次更新
1 年前 (2024年3月26日)
相关分类
  • 隐私和安全
许可证
仅 GNU 宽通用公共许可证 v3.0
版本历史
  • 查看所有版本
添加到收藏集
举报此附加组件
1.4.5 的发布说明
We've introduced the following updates:
- Added the capability to open the query in Uncoder AI
- Improved the functionality of saving queries in a custom repository on the SOC Prime Platform:
- Multiple tag selection is supported when saving query metadata
- The link in the successful saving message now opens the custom repository on the SOC Prime Platform where the query has been saved to
- Added the Clear button on the Query tab to remove the value from the Query field
SOC Prime, Inc. 制作的更多扩展
  • 目前尚无评分

  • 目前尚无评分

  • 目前尚无评分

  • 目前尚无评分

  • 目前尚无评分

  • 目前尚无评分

转至 Mozilla 主页

附加组件

  • 关于
  • Firefox 附加组件博客
  • 扩展工坊
  • 开发者中心
  • 开发者政策
  • 社区博客
  • 论坛
  • 报告缺陷
  • 评价指南

浏览器

  • Desktop
  • Mobile
  • Enterprise

产品

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • 隐私
  • Cookie
  • 法律

除非另有注明,否则本网站上的内容可按知识共享 署名-相同方式共享 3.0 或更新版本使用。