The Siemplify Extension von devsecdan

The Siemplify Extension is a modular, customisable browser extension for the Siemplify SOAR platform. It was created with the intent to improve the lives of security analysts by providing several additional features and improvements to the Siemplify web interface.

The extension is structured into several modules, each enabling a number of features.

Assign New Cases - Adds a button to the case list which, when clicked, assigns a specified number of cases to the user.

Auto-Select Next Case - Automatically selects the next case in the list after closing a case.

Case ID Search - Adds a search bar which allows you to enter a case ID to quickly open a case in a new tab.

Cases Navigation - Adds configurable shortcut keys to easily navigate around the Cases tab.

Close Case - Allows the user to configure shortcuts to close a case with a pre-defined Reason and Root Cause.

Context Actions - Configure contextual actions, which can be accessed by right-clicking any entity or text element on a page. Actions are templated links which can be used to perform actions such as VirusTotal lookups on entities or pass entity data to a query service.

Environment Monitoring - A monitoring module which can be used detect and alert when no cases have been observed from a given environment within a certain time threshold.

Entity Enrichment - Enrich entities within cases with information from the entity page, including an overview of previous cases that the entity was seen in, and the contents of the entity log.

Expand Accordion - Automatically expand accordions.

Hide Recommendations - Hide the recommendations accordion from cases.

CSS Style - Make a number of style changes, including changing case highlight colour, adding alternating table colours, enhancing the way tables resize, and enabling wrapping of table and entity text.

Quick Copy - Allows a user to easily copy certain information by simply clicking it.

Table Sort - Alphabetically sort tables.