HuntGrid IOC Enrichment

Enrich IPs, domains, hashes and URLs against your HuntGrid cyber operations platform, with a live threat-intel verdict.

HuntGrid IOC Enrichment brings your HuntGrid Cyber Operations Platform's threat-intelligence to wherever you're working — a SIEM console, a threat report, a webmail client, or any web page. Select an indicator of compromise and enrich it in one click, without breaking your investigation flow. For any IP address, domain, file hash, or URL, the extension shows you two things side by side: LIVE THREAT INTELLIGENCE • VirusTotal detection counts with an at-a-glance detection bar and a deep link to the full report • AbuseIPDB confidence score, report count, country, ISP, usage type, and Tor-exit-node flag for IP addresses • A single, clear verdict — Malicious, Suspicious, Clean, or Unknown YOUR HUNTGRID RECORD • Whether the indicator is already tracked in your HuntGrid IOC database • The analyst verdict, severity, confidence, source, notes, and active status your team has recorded BUILT FOR ANALYST SPEED • Right-click to enrich — highlight any indicator on a page and choose "Enrich in HuntGrid". • Toolbar popup — paste an indicator manually for an instant lookup. • Scan this page for IOCs — extract every IP, domain, hash, and URL on the current page and enrich any of them (runs only when you click it). • Automatic defanging — paste 1.2.3[.]4, hxxp://, or evil[.]com and it just works. • Copy any indicator, or Open in HuntGrid to jump straight to full enrichment in the web app. SECURE BY DESIGN The extension signs you in with the same username, password, and two-factor authentication as your HuntGrid web app. It talks only to your own HuntGrid server — no third-party analytics, no data sharing. Your session is scoped and time-limited, and revoking a user in HuntGrid instantly revokes their extension access. Requires a HuntGrid deployment and an account with two-factor authentication enabled.