Cisco XDR Ribbon EN
Cisco XDR · Firefox
XDR Ribbon and Investigation Widgets
<all_urls>），意味着它可以读取你在任意站点的页面内容，包括已登录的页面。这是许多扩展正常工作的必要条件，但也值得你确认来源可信。
截图
简介
Cisco XDR Ribbon Extension
Offered by: Cisco XDR
The Cisco XDR ribbon extension offers a distributed set of capabilities that unify visibility, enable automation, accelerate incident response workflows, and improve threat hunting directly from your browser. These capabilities are presented in the form of applications (apps) and tools in the XDR ribbon. With the combination of the apps and your browser, you can:
- Immediately extract observables from arbitrary browser content and get the current Cisco verdict on each observable.
- Take response actions on observables via Cisco XDR and your configured integrated products.
- Use the casebook app to gather information in one place as you explore sightings across multiple products. The casebook is a powerful and convenient tool for saving, sharing, and enriching your threat analysis. Use it to track notes and other information as you follow leads during your threat investigation across your product suite.
- Use the incidents app to triage, investigate, and track high-confidence security incidents from integrated products. You can view the status and summary of the incidents, change the status, link incidents to snapshots, cases, and indicators, and pivot into Cisco XDR to perform investigations.
- Use the Orbital app to run live SQL queries against your endpoints.
You can select text on a page or select a single observable, open the context menu, and choose the Cisco XDR menu option. The selection will be inspected for observables and you will be presented with information and actions to help with your investigations.
You can also quickly find observables on the page, use the Pivot menus to create judgements for the observable and associate it with indicators, investigate the observables in Cisco XDR, block or unblock domains, start isolation of endpoints, and pivot to the integrated products to perform additional threat analysis.
---
Data Services Notice
This tool can read the text and page structure of websites you visit and collects usage analytics. Website data is only collected on user interaction from:
- Context menu actions on page
- Find observables on page (Ribbon bar)
- Scan page for endpoints (Orbital)
Privacy Policy
https://trustportal.cisco.com/c/r/ctp/trust-portal.html#/19800897126758608
Cisco's End User License Agreement
https://www.cisco.com/c/en/us/about/legal/cloud-and-software/software-terms.html
Cisco XDR Ribbon 是做什么的
Cisco XDR Ribbon 是一款面向 Firefox 的实用工具类扩展，主要用来解决浏览器里某类具体的小问题。官方对它的介绍是：XDR Ribbon and Investigation Widgets在Firefox 附加组件商店（AMO）上，它当前版本 1.25.12，约 31 名用户。
适合什么人用
从功能定位看，Cisco XDR Ribbon 更适合想补上浏览器原生缺失功能的用户。如果你平时只是偶尔遇到相关需求，用浏览器自带功能也能凑合；但如果这件事每天都发生，装一个专门处理它的扩展通常比手动操作省事得多。需要注意的是它作用于所有网站，装上后建议先观察一两天，确认不影响常用站点的正常使用。
怎么安装 Cisco XDR Ribbon
- 打开Firefox 附加组件商店（AMO）上的官方页面；
- 点「添加到浏览器」并确认权限提示；
- 装好后在扩展列表里固定图标，方便随时开关。
本站只做索引与介绍，安装包来自官方商店。如果商店页面提示当前地区不可用，说明该扩展未在你所在区域上架。
常见问题
Cisco XDR Ribbon 是免费的吗？
Cisco XDR Ribbon 在Firefox 附加组件商店（AMO）免费提供下载。它是浏览器扩展，装上就能直接用，不需要注册账号。
Cisco XDR Ribbon 安全吗？
它只申请了 0 项权限，范围比较克制，没有申请「读取所有网站数据」这种大权限。
Cisco XDR Ribbon 支持哪些浏览器？
当前收录的版本来自Firefox 附加组件商店（AMO），适用于 Firefox。同一个扩展在其他商店可能有对应版本，但功能与版本号不一定相同。
怎么卸载 Cisco XDR Ribbon？
在扩展管理页找到 Cisco XDR Ribbon，点移除即可。它在本地保存的设置会一起清掉，不会残留数据。
权限清单 来自 manifest.json 原文
站点访问 2
*://*/*https://*/*
接口权限 6
activeTabalarmscontextMenusidentityidlestorage