Skip to main content
The Pulsedive add-on keeps threat intelligence within reach wherever you work in the browser. Enrich indicators inline as you read, cutting down context switches in your workflow. These sections walk through the most common ways to put it to work.
To install the add-on, visit Overview.

​
Enriching Indicators While Browsing

When you’re reading a threat advisory, security blog, or research report, indicators appear as plain text scattered throughout the content.
  1. Enable the auto-popup so the add-on identifies and highlights supported observable entities as you go, without copying anything manually.
  2. Highlight any text containing a domain, IP address, or URL. The add-on sidebar opens with enrichment data from Pulsedive.
  3. Run a passive or active scan, or pivot to Pulsedive for a deeper look.
If the auto-popup fires too aggressively on a particular site, visit Muting Add-On Notifications.

​
Processing a Large Set of Indicators

When you have a block of text containing many indicators, from a log excerpt, a paste site, or a shared report, Bulk Parsing lets you process them all at once rather than one at a time.
  1. Enable Bulk Parsing in the add-on settings.
  2. Highlight the entire block of text. The add-on parses and refangs all observable entities it finds.
  3. Download the full list as a CSV for use in other tools, or pass them to Pulsedive Analyze for bulk enrichment.

​
Researching a Threat Name

When you come across a threat actor name, malware family, or campaign alias, look it up without navigating away from the page.
  1. Highlight the exact name or alias in the page text.
  2. Select the Pulsedive add-on button in the browser toolbar. The add-on retrieves a summary from Pulsedive’s dataset and presents it in the sidebar.
  3. Open the full threat profile on Pulsedive to explore associated indicators, TTPs, latest news, and more.
Threat enrichment requires the add-on button. It is not available via the auto-popup.

​
Muting Auto-Popup

The auto-popup is useful for active research, but it can become disruptive on sites where you don’t need constant enrichment, such as internal tooling, ticketing systems, or sites with large volumes of known-good indicators. Use the mute options to reduce interruptions without disabling the add-on entirely.
  1. Select the auto-popup sidebar on the site you want to mute.
  2. Choose a muting option:
    • Mute for 5 minutes: Temporarily pauses the auto-popup, then restores it automatically.
    • Mute for this site: Disables the auto-popup on the current domain until you remove the exception.
    • Disable the auto-popup: Turns off the auto-popup across all sites.
To undo any of these:
  1. Select the add-on button in the browser toolbar.
  2. Select the Unmute menu.
To review and remove site exceptions, visit the add-on settings page.