Cisco SecureX Ribbon

Cisco SecureX Ribbon

SecureX Ribbon and Investigation Widgets

What is Cisco SecureX Ribbon?
Cisco SecureX Ribbon is a Firefox add-on offered by Cisco SecureX. It provides a distributed set of capabilities that unify visibility, enable automation, accelerate incident response workflows, and improve threat hunting directly from your browser.
Stats
By: Cisco XDR
Users: 170
Rating: 3.00 (2)
Version: 2.1.0 (Last updated: 2023-01-26)
Creation date: 2020-11-19
Weekly download count: 1
Firefox on Android: No
Risk impact: Very high risk impact
Risk likelihood: Moderate risk likelihood
Manifest version: 2
Permissions:
  • activeTab
  • contextMenus
  • storage
  • idle
  • https://visibility.int.iroh.site/
  • https://private.intel.int.iroh.site/
  • https://visibility.test.iroh.site/
  • https://private.intel.test.iroh.site/
  • https://visibility.apjc.amp.cisco.com/
  • https://private.intel.apjc.amp.cisco.com/
  • See more
Size: 1.70M
Stats date:

Other platforms

Not available on Chrome
Not available on Edge
Want to check extension ranking and stats more quickly for other Firefox add-ons? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Firefox Browser Add-ons.
Chrome-Stats extension
Summary

Cisco SecureX Ribbon Extension

Offered by: Cisco SecureX

The Cisco SecureX Ribbon extension offers a distributed set of capabilities that unify visibility, enable automation, accelerate incident response workflows, and improve threat hunting directly from your browser. These capabilities are presented in the form of applications (apps) and tools in the SecureX ribbon. With the combination of the apps and your browser, you can:

  • Immediately extract observables from arbitrary browser content, and get the current Cisco verdict on each observable
  • Take response actions on those observables via Threat Response and your configured integrated products
  • Use the SecureX casebook app to gather information in one place as you explore sightings across multiple products. The casebook is a powerful and convenient tool for saving, sharing, and enriching your threat analysis. Use it to track notes and other information as you follow leads during your threat investigation, across your product suite.
  • Use the SecureX incidents app to triage, investigate and track high-confidence security incidents from integrated products. You can view the status and summary of the incident, change the status, link it to snapshots, cases, and indicators, and pivot into Threat -Response to investigate it.
  • Use the SecureX Orbital app to run live SQL queries against your endpoints.

The SecureX ribbon extension also enables you to find and inspect observables through the browser's context menu. Select text on a page, or select a single observable, open the context menu, and choose the Cisco SecureX menu option. The selection will be inspected for observables and you'll be presented with information and actions to help with your investigations.

You can also quickly find observables on the page, use the Pivot menus to create judgements for the observable and associate it with indicators, investigate the observables in Threat Response, block or unblock domains, start isolation of endpoints, and pivot to the integrated products to perform additional threat analysis.

See more
User reviews
Thought this would be really neat since we use multiple SecureX products. Unfortunately, having the addon loaded breaks the functionality of our Track-It helpdesk ticket system because of 'Uncaught DOMException: Permission denied to access property "document" on cross-origin object.'
by JT Anderson, 2023-05-08
View all user reviews
Safety
Risk impact

Cisco SecureX Ribbon is very risky to use and it requires a lot of sensitive permissions. Avoid installing this add-on unless you absolutely trust this publisher.

Risk likelihood

Cisco SecureX Ribbon is probably trust-worthy. Prefer other publishers if available. Exercise caution when installing this add-on.

Upgrade to see risk analysis details
Screenshots