Recorded Future this week announced the availability of Express, a free web browser extension designed to help security teams prioritize vulnerability patching and alerts from security information and event management (SIEM) tools.
The extension is currently available for Chrome and Firefox, and once it’s installed an icon with the Recorded Future logo will be added to the browser’s toolbar. Users will have to provide a business email address, set a password for their account, and agree to the extension collecting data from the web pages they visit.
Once the extension is enabled, clicking its icon will display information about the hashes, vulnerabilities, IPs, and domains found on the current web page. Additional information can be obtained for each category and users can enable an option that displays risk scores directly on the page next to each piece of relevant information.
Recorded Future Express can provide information about the indicators from nearly any type of website or technology, including SIEM and other web-based tools and resources.
“Instead of opening multiple browser tabs and pivoting between them to collect and analyze data manually, Express does the work for you. Simply click on the indicator you want to explore on any webpage or tool — including SIEMs, vulnerability scans, malware analysis reports, security blogs, emails, and more,” Recorded Future explained in a blog post.
“View real-time risk scores directly on the page to confidently prioritize high-risk indicators. You can also access relevant risk information instantly. For example, you can immediately find out whether or not an IP is a current command-and-control (C2) server,” it added.
Express uses data from Recorded Future’s commercial platform, and the company claims it’s the only threat intelligence provider to openly offer access to its data.
Threat intelligence firm Anomali also offers a similar browser extension, but its product is part of the company’s Altitude solution and is only available to Anomali customers.