The Cisco Threat Response browser plugin provides contextual investigation capabilities that can be launched from Secure Firewall Management Center. It allows an administrator to investigate an observable, such as a suspicious IP address, against Cisco threat-intelligence and integrated security sources without manually transferring the value to another interface. Secure Network Analytics analyzes network telemetry and behavior but is not the browser-based lookup mechanism described. Cisco ISE supplies identity, authorization, and network-access context, while Secure Endpoint provides endpoint telemetry and file or process investigation. Neither is the direct web-page investigation tool requested. Cisco documentation describes contextual cross-launch functionality for looking up suspicious source addresses in Cisco or third-party cloud-hosted intelligence services. Therefore, the Threat Response browser plugin is the correct selection. Cisco event investigation using web resources

================