Cisco Threat Response Casebook (beta)

Cisco Threat Response Casebook (beta)插件简介

Cisco Threat Response Casebook (beta)插件描述

Once installed, please visit your regions Threat Response API Clients page to create Casebook client credentials. In der f the book extension to function, you must select ALL SCOPES when adding your new API Client.
 NAM: https://visibility.amp.cisco.com/#/settings/oauth
 EU: https://visibility.eu.amp.cisco.com/#/settings/oauth
 APJC: https://visibility.apjc.amp.cisco.com/#/settings/oauth

The Cisco Threat Response Casebook is a powerful  convenient tool provided by Threat Response f saving, sharing,  enriching your threat analysis. Use s f tracking notes  other bits  pieces of infmation as you follow leads in Threat Response. You can add observables  notes as you pursue your quarry. 

Along with the Casebook, youll be able to find  inspect observables through the browsers context menu. Select text on a page,  select a single observable, open the context menu  choose the Cisco Threat Response menu option. The selection will be inspected f observables  youll be presented with infmation  actions to help with your investigations.

You can also launch an investigation on a single observable quickly by typing "ctr [space]" in the URL bar then typing  pasting an observable.
                                

Cisco Threat Response Casebook (beta)插件离线安装方法

1.首先用户点击谷歌浏览器右上角的自定义及控制按钮，在下拉框中选择设置。

2.在打开的谷歌浏览器的扩展管理器最左侧选择扩展程序或直接输入：chrome://extensions/

3.找到自己已经下载好的Chrome离线安装文件xxx.crx，然后将其从资源管理器中拖动到Chrome的扩展管理界面中，这时候用户会发现在扩展管理器的中央部分中会多出一个”拖动以安装“的插件按钮。

4.下载 Cisco Threat Response Casebook (beta)Chrome插件v0.9.6版本到本地。

5.勾选开发者模式，点击加载已解压的扩展程序，将文件夹选择即可安装插件。

注意：最新版本的chrome浏览器直接拖放安装时会出现“程序包无效CRX-HEADER-INVALID”的报错信息，参照这篇文章即可解决