This experiment was born from a desire to get full URL telemetry into my SIEM (Chronicle SecOps), but not wanting to go through the drama of setting up Squid Proxy. With this extension, you can configure it to send a webhook for each URL that is visited. To experiment, you can use a free service like webhook.site
.
- You must sign-in to the Chrome browser. This is required for generating the telemetry
- Comfortable with loading unpacked extensions within the browser.
- Download the code from this repo.
- Access the extensions page by navigating to
chrome://extensions/
- Click on
Load unpacked
and choose the folder where you unzipped the contents of the repo - Configure the webhook URL to send to under the extensions options.
- Once saved, as long as your are signed in and the webhook URL is configured, you should start instantly receiving telemetry.
{
"timestamp": "2024-04-16T13:07:34.113Z",
"user": "[email protected]",
"app_name": "Webhook URL Observer",
"url": "https://cloud.google.com/security/products/security-operations",
"method": "POST"
}