Eric Partington

Context Menu - Cymon.io

Blog Post created by Eric Partington Employee on Sep 23, 2016

Here is another example of using the context menu option in RSA NW to provide analyst with right click functions to pivot into other sources of data (internal or external to your org.).

https://cymon.io/

Interesting site, provides information for a number of elements so how would we create a context menu to pivot into the site for the meta value that was interesting ?

 

{
    "displayName": "[Cymon.IO by eSentire]",
    "cssClasses": [
        "ip-src",
        "ip-dst",
        "ip.src",
        "ip.dst",
        "ipv6-src",
        "ipv6-dst",
        "ipv6.src",
        "ipv6.dst",
        "orig_ip",
        "alias-host",
        "alias.host",
        "domain.dst",
        "domain-dst"
    ],
    "description": "Cymon.IO lookup for IP, hash, domain,URL",
    "type": "UAP.common.contextmenu.actions.URLContextAction",
    "version": "Custom",
    "modules": [
        "investigation"
    ],
    "local": "false",
    "groupName": "externalLookupGroup",
    "urlFormat": "https://cymon.io/{0}",
    "disabled": "",
    "id": "CymonIOAction",
    "moduleClasses": [
        "UAP.investigation.navigate.view.NavigationPanel",
        "UAP.investigation.events.view.EventGrid"
    ],
    "openInNewTab": "true"
}

Attachments

Outcomes