Google Safe Browsing Integration

Google Safe Browsing helps protect over four billion devices every day by showing warnings to users when they attempt to navigate to dangerous sites or download dangerous files. Safe Browsing also notifies webmasters when their websites are compromised by malicious actors and helps them diagnose and resolve the problem so that their visitors stay safer. Safe Browsing protections work across Google products and power safer browsing experiences across the Internet.

Google Transparency Report includes details on the threats that Safe Browsing identifies. The Transparency Report includes Google Site Status diagnostic tool that you can use to see whether a site currently contains content that Safe Browsing has determined to be dangerous.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Third-Party tab and navigate to the Google Safe Browsing integration.

  3. Click the plus sign (+) in the lower-right corner of the card. The Google Safe Browsing integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Google Safe Browsing integration in Cisco XDR.

You can perform the following task after you integrate Google Safe Browsing with Cisco XDR:

  • Investigations - Start a new investigation into any combination of IP addresses and domain names and the results will include any records of them found in your Google Safe Browsing. To verify that this integration is working, and to see what kind of data is returned, investigate one of more observables about which you know Google Safe Browsing has recent information. For details, see Investigate.