Manage and Configure Rapid7 Extend

This topic describes methods to manage and configure the Rapid7 Extend browser extension.

Extend browser states

The Rapid7 Extend browser icon indicates in what state the browser extension is.

The following table shows the indicator states:

If the extension icon looks like thisThe extension is in this state
Blue square with numeric valueEnabled.
Web pages are being scraped. If IOCs are found, the amount is displayed.
Blue square with exclamation pointNot logged in.
To scrape, click the icon, then Log in to Threat Command.
Icon grayed outDisabled.
To enable, click the icon and clickEnable.
Orange square with exclamation pointError.
To see the error message, click the icon.
Gray square with number zeroEnabled, no entries.
No entries to scrape on the current web page.

Change default Extend scraping method

If Extend is enabled, you can change the way in which pages are scraped.

To change the default scanning method:

  1. From the Extend summary window, click the settings gear.
  2. Select a default scraping method.
  3. Click Done.

Disable scraping on a specific domain

You can disable (or enable) scraping on a specific domain.

To disable (enable) scraping:

  1. From the domain that you don’t want to be scraped, open the Extend summary window.
  2. Click the settings gear, then select Disable on this domain.
    To enable scraping on a domain on which it was previously disabled, click Enable.
  3. Click Done.

Severity levels

Scraped entries are marked with color-coded severity levels, taken from the severity in Threat Command. If the entry is not in Threat Command, it is marked as N/A.

For IOCs:

The severity level can be Low, Medium, or High.

For CVEs:

The severity level can be Low, Medium, High, or Critical.