Google Safe Browsing

Google Safe Browsing is a Threat Intelligence (TI) integration. TI Data Source integrations are used during investigations to improve analysis and in interactive chat to help answer questions. They are optional, but enabling more tooling integrations enhances Dropzone analysis.

The Dropzone platform integrates with Google Safe Browsing to perform real-time checks on URLS and determine if there are any threats associated with them.

Integrations Overview

To enable these integrations you will perform the following actions:

• Grant IAM access to your principal

• Create an API Key with the necessary permissions

• Enable the Data sources within your Dropzone tenant

IAM access

To use Google Safe Browsing, you must have a Google Developer Console project. If you do not already have a project, see the Google Cloud Platform documentation for more information. You must also have the IAM access permissions to create and manage API keys within the project.

If you do not already have those permissions, see the (Google Cloud Platform documentation)[https://docs.cloud.google.com/iam/docs/granting-changing-revoking-access] for instructions on how to grant IAM access roles, or have an administrator perform the following steps:

• Go to the GCP cloud console at https://console.cloud.google.com

Project Dropdown

• Click the current project dropdown

• Click "All"

• Select the organization or folder you want Dropzone to access

Resource Selection

• From the left menu, navigate to IAM & Admin > IAM

IAM & Admin Menu

• Under "View by principals," find the principal (e.g. your account) you want to be able to create an API key

• Click the Edit icon

• Click "Add another role"

• Add the following roles:

Role Name	Purpose
API Keys Admin	Allows the principal to create and manage API keys for a project
Service Usage Viewer	Allows the principal to restrict an API key to specific APIs by using the Google Cloud console

Add the requisite roles

• Click "Save"

Create an API Key

Google Safe Browsing requires an API key to enable.

To obtain an API Key, do the following:

• In the left sidebar of your Google Cloud console, navigate to APIs & Services > Credentials

The GCP sidebar

• Click "Create Credentials," then select "API Key"

• Name the key something memorable, such as "Dropzone AI"

• In the "Select API restrictions" dropdown, select "Safe Browsing API"

If Safe Browsing is not available to select, this API may not be enabled in the Google Cloud project that you chose. To enable it, go to the Safe Browsing page in the API Library of your Cloud Console. Click "Enable," then try again.

• Click "Create"

• Record the key value shown for use later in the Dropzone UI where it is called "API key"

Enable Google Safe Browsing

To enable the Data Source integration, do the following:

• Navigate to your Dropzone AI tenant home page e.g. https://mycompany.dropzone.app

• In the bottom left hand corner, click Settings > Integrations

Integrations Dropdown

• Click "Library"

If you have previously integrated this application, click "Configured"

Click Library

• In the Search bar, search ipinfo.io, then click "Configure"

The Google Safe Browsing Tile

• Input the API key

• Click "Test & Save" to finish

The Google Safe Browsing configuration

If you have any errors engage your Dropzone AI support representative.