cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

How do I configure a Threat Response browser plugin?

240
Views
0
Helpful
0
Comments

Question

How do I configure a Threat Response browser plugin?

Answer

The browser plugins are easily configured.

  1. First you need to generate an "API Client" in Threat Response. An API Client is essentially a set of credentials that identifies a program has having the authority to act in Threat Response on your behalf.  
    1. In order to generate an API Client for the Browser Plugin, navigate to Settings->API Clients in Threat Response.
    2. Click Add API Credentials 
    3. Give the Client a meaningful name that will make sense to you later, such as "<username> browser plugin"
    4. Scopes control what rights the program will be granted once it provides these credentials. Select Select All
    5. Optionally, give the Client a description.
    6. Click Add New Client
    7. Save the resulting Client ID and Client secret; these are your credentials. Treat these as you would your Threat Response passwords; effectively they grant the same privileges. To prevent or diagnose transcription errors, keep this tab open until the plugin configuration is complete. 
  2. Next, download and install the browser plugin for your browser, one of:
  3. Configure the plugin
    1. In the plugin, if not immediately presented with a form for your credentials, click 'casebook' on the top left, and then the gear on the top right.
    2. Select the appropriate region
    3. Enter the credentials saved above
    4. Click Authenticate to test. If the test is not successful, double check that you entered the strings correctly. 
    5. If the test is successful, you may close the API Client tab and begin using the browser plugin!

Congratulations! That's it. You can now leverage the power of Threat Response without even having to go to Threat Response.  

If you would like to see a video describing these steps, go here