Browser Extension v3 builds on the capabilities of previous versions with the addition of CAL natural language processing (NLP) that enables you to scan a web page and query the CAL NLP engine for matches on MITRE® ATT&CK® techniques. NLP looks for language that is indicative of MITRE ATT&CK techniques rather than looking for an exact match. When a technique is identified, you can hover over the text for additional insights on that technique and add relevant indicator information to your threat library for future investigations.

Users will also benefit from an updated Browser Extension interface for a more intuitive experience. Updates include ranking Indicators based on ThreatAssess score, a settings menu alphabetized by source, and the ability to filter between Groups and Indicators. With Browser Extension v3, you’ll maximize insights on MITRE ATT&CK techniques without having to track your findings in a spreadsheet.

Version 2 of the ThreatConnect Browser Extension builds upon the foundation set with version 1 and adds support for scanning a page for groups like Malware families and Intrusion Sets. In addition to returning information about a given group, users will also see a list of known aliases for the groups when appropriate. This helps users stay focused on the work at hand and reduces the time needed to determine the names different vendors use for threat actor groups.

The ThreatConnect Browser Extension requires the user to have access to a ThreatConnect instance that is on ThreatConnect version 6.4 or later.

Version 1.1 of the ThreatConnect Browser Extension includes a few usability enhancements. Most notably, users can now Select or Deselect All when choosing Known and Unknown indicators to import into the ThreatConnect platform.