Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Identifies browser extension CRX files observed across endpoints. Helps in enumerating commonly installed extensions and hunting for potentially malicious ones. --- Optional Enrichment: To enrich the ExtensionId values with extension names, ratings, and user counts, use the open-source script from: https://github.com/venkat117/browser-extension-scraper
| Attribute | Value |
|---|---|
| Type | Hunting Query |
| Solution | GitHub Only |
| ID | ede058ab-97a8-4494-aa76-b7f5f6d78cba |
| Severity | Medium |
| Kind | Hunting |
| Tactics | Discovery |
| Required Connectors | MicrosoftDefenderAdvancedThreatProtection |
| Source | [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Discovery/BrowserExtension_Discovery.yaml) |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊