SOC Analyst Toolkit by Jergens Turdley

A comprehensive toolkit for SOC analysts with IOC analysis, OSINT integration, and snippet management

About this extension

0.5.2

Fixed:
• The floating window no longer opens by itself when you launch the browser. It only opens from the toolbar button now, and it still remembers its size and position.
• Clicking a snippet in the page overlay used to fail silently. It now copies the snippet content like it should.
• Changing the theme or other settings no longer resets your page snippet toggle or bulk link preference.
• VirusTotal URL lookups now land on the correct report page.
• CSV exports escape quotes properly and guard against spreadsheet formula injection.

Changed:
• Cleaned up internal code and consolidated the triage prompt builder into one shared module.

Note for Firefox users: this is the first Firefox release. Host permissions are optional at install time. If you want IOC enrichment (API calls to VirusTotal, AbuseIPDB, etc.), grant them in the install prompt or in about:addons. Everything else works without them.

Rated 0 by 0 reviewers

Permissions and data

Required permissions:

Get data from the clipboard
Input data to the clipboard
Display notifications to you

Optional permissions:

Access your data for www.virustotal.com
Access your data for www.abuseipdb.com
Access your data for api.abuseipdb.com
Access your data for ipinfo.io
Access your data for api.greynoise.io
Access your data for viz.greynoise.com
Access your data for urlscan.io
Access your data for urlhaus-api.abuse.ch
Access your data for urlhaus.abuse.ch
Access your data for mb-api.abuse.ch
Access your data for bazaar.abuse.ch
Access your data for otx.alienvault.com
Access your data for gchq.github.io
Access your data for cyberchef.org
Access your data for macvendors.com
Access your data for www.macvendorlookup.com
Access your data for www.blockchain.com
Access your data for etherscan.io
Access your data for attack.mitre.org
Access your data for crt.sh
Access your data for checkurl.phishtank.com

Data collection:

The developer says this extension doesn't require data collection.