Installing and Configuring the Browser Extension Enrichment Service
  • 24 Aug 2022
  • 2 Minutes to read
  • Dark
    Light

Installing and Configuring the Browser Extension Enrichment Service

  • Dark
    Light

 

As of ThreatConnect version 6.7, you are no longer required to install and configure the Browser Extension Enrichment Service App to enrich potential Indicators with data from ThreatConnect’s Collective Analytics Layer (CAL™) and scan an online resource for potential Groups when using the ThreatConnect Browser Extension.

Users who want to enrich potential Indicators with data from ThreatConnect’s Collective Analytics Layer (CAL™) and scan an online resource for potential Groups will need their System Administrator to install the Browser Extension Enrichment Service App via TC Exchange™ and configure a corresponding Service on their ThreatConnect instance.

Installing the Browser Extension Enrichment Service App

  1. Log into ThreatConnect with a System Administrator account.
  2. On the top navigation bar, hover the cursor over Settings Icon  Description automatically generated and select TC Exchange Settings. The Installed tab of the TC Exchange Settings screen will be displayed.
  3. Select the Catalog tab. The Catalog screen will be displayed.
  4. Enter “browser extension” (without quotation marks) in the search bar to filter the results to show the Browser Extension Enrichment Service App (Figure 1).
    Graphical user interface, application  Description automatically generated

     

  5. Click Install in the Options column. The Release Notes window for the Browser Extension Enrichment Service App will be displayed (Figure 2).
    Graphical user interface, text, application  Description automatically generated

     

Creating and Configuring the Browser Extension Enrichment Service

  1. On the top navigation bar, hover the cursor over Playbooks and select Services. The Services tab of the Playbooks screen will be displayed.
  2. Click the + NEW button at the upper-left corner of the screen. The Select screen of the Create Service drawer will be displayed (Figure 3).
    Graphical user interface, text, application, email  Description automatically generated

     

    • Name: Enter a name for the Service.
    • Type: Select Service API.
    • Service: Select Browser Extension Enrichment Service v1.0.x.
    • Click the NEXT button.
  3. The Configure screen of the Create Service drawer will be displayed (Figure 4).
    Graphical user interface, application  Description automatically generated

     

    • Launch Server: Select tc-job.
    • Permissions: Select the Organization(s) that will have access to the Service.
    • Allow all: Select this checkbox if you want to give all Organizations on the ThreatConnect instance access to the Service.
    • API Path: This field is automatically populated with a default value of browser_extension_enrichment. Do not modify this value.
    • Enable Notifications: Select the Enable Notifications checkbox to send an email when the Browser Extension Enrichment Service fails to start, if desired. It is recommended to enable this setting.
    • Email Address: If the Enable Notifications checkbox is selected, enter the email address to which notifications should be sent. It is recommended to enter an email address for a ThreatConnect user with a System role of Administrator.
    • Max restart attempts on failure: Enter the number of times ThreatConnect should try to restart the Browser Extension Enrichment Service if it fails. It is recommended to set this value to 3.
    • Click the NEXT button.
  4. The Parameters screen of the Create Service drawer will be displayed (Figure 5).
    A picture containing graphical user interface  Description automatically generated

     

    • Click the SAVE button.
  5. The Service will now be displayed on the Services tab of the Playbooks screen (Figure 6). Toggle the REST API slider on (orange), and, if desired, adjust the Log Level.
    Graphical user interface, application  Description automatically generated

     

    Note
    It is recommended that the log level for the Browser Extension Enrichment Service be set to INFO, WARN, or ERROR.

ThreatConnect® is a registered trademark of ThreatConnect, Inc.
CAL™ and TC Exchange™ are trademarks of ThreatConnect, Inc.

20107-02 v.04.A


Was this article helpful?