FireEye iSIGHT Browser Extension Chrome Extension

Finds IPs, Domains, MD5, SHA256, SHA1, fuzzy hashes and file names in web pages and matches to fireeye isight intelligence.

The Browser Extension will enable all customers to connect the data that they’re viewing in their web browser, regardless of the tool or site, to the full intelligence context provided by FireEye.

This will allow customers to connect to fireeye intelligence context from Internet databases, such as VirusTotal or WHOIS, which otherwise was not possible to integrate.

youll need to enter your fireeye isight api 2.0 credentials/keys to make the plugin operational.

For that youll have to right click on the icon & select "Options" which will then open a dialog where youll have to enter your credentials/keys.

Clicking on the icon will detect ip addresses, domains & file hashes etc.

on a displayed web page.

It will parse the entire webpage or just the selection for the observables/indicators and will highlight them.

Parsing of the entire webpage or just the selection is based on the configuration in the option dialog.

After that it will match the observables/indicators with FireEye iSIGHT API 2.0 interface and highlight the ones that are matched.

On mouse over of these matched observables/indicators, fireeye icon will appear which when clicked will call to MySIGHT in order to allow customers quick access to our intelligence for context around whatever issue they are investigating.

Also you have the option to just directly select the observable/indicator and redirect it to MySIGHT.

If the indicator/observable is matched to any one report then the clicking on the FireEye icon will take you to that particular report directly.

Or else if it is matched in more than one report then youll get redirected to the mysight search page.