A network administrator observes an attempted attack from a specific IP address in Cisco Secure...

The Cisco Threat Response browser plugin provides contextual investigation capabilities that can be launched from Secure Firewall Management Center. It allows an administrator to investigate an observable, such as a suspicious IP address, against Cisco threat-intelligence and integrated security sources without manually transferring the value to another interface. Secure Network Analytics analyzes network telemetry and behavior but is not the browser-based lookup mechanism described. Cisco ISE supplies identity, authorization, and network-access context, while Secure Endpoint provides endpoint telemetry and file or process investigation. Neither is the direct web-page investigation tool requested. Cisco documentation describes contextual cross-launch functionality for looking up suspicious source addresses in Cisco or third-party cloud-hosted intelligence services. Therefore, the Threat Response browser plugin is the correct selection. Cisco event investigation using web resources

================