Skip to content
COEUS
Install
Start here

Getting started

Install Coeus, try a local tool and open research sources from the browser.

Coeus opens on Tools. You can inspect text, files and images locally, or open your chosen sources for an indicator. The built-in tools and sources need no account or API key.

These steps describe Coeus 2.4. An older installed extension can still open its earlier Explore screen until it updates.

Install it

  1. Open the install page and choose Add to Chrome. In Edge, open the same Chrome Web Store listing and allow extensions from other stores when Edge asks.
  2. Review the site-access prompt. Coeus reads a page when you ask it to inspect that page or use its context menu; privacy design explains what stays in your browser.
  3. Pin Coeus from the puzzle-piece menu. The toolbar icon opens the side panel. You can also set or change a keyboard shortcut.

The side panel and full Tools dashboard use Coeus screens served from coeus.tools and cached by your browser. Your local settings and existing records remain in this browser when the site is unavailable.

For your assistant

Paste this to your assistant if you would rather be walked through the first run than read it.

I have just installed the Coeus browser extension in Chrome or Edge. Walk me through the current Tools screen, one step at a time, waiting for me after each step. Use example.com as a safe example: show me how a recognised domain opens in the side panel and how to explicitly open matching source tabs, how to choose IOC Extractor, and where Sources and Settings live. Explain that tools process supplied inputs locally and that opening sources sends a value to those chosen sites. Do not tell me to start in Explore, automatically Trace, or configure an API key. If I get stuck, ask what I see rather than guessing.

Try Tools

Open the side panel

Select the Coeus toolbar icon. Tools has one search field for tool names and indicators. Search for a tool, or paste text into a tool to see its result. Supported tools process their input in your browser without a separate Run step.

Open sources for a recognised value

Paste or type example.com in Search tools or indicators. Coeus shows the domain in the side panel without opening any source tabs. Choose Open all sources in tab group to open the enabled matching sites in the foreground. The source sites receive the value you open there.

Inspect copied text

Choose IOC Extractor from Tools and paste a short example containing example.com. Its extracted indicators appear automatically. Other tools cover URLs, email headers, PowerShell, hashes, files, image metadata and QR codes; each shows the inputs it accepts.

For a name, business or bare username that Coeus cannot classify confidently, the search field offers Search as… with Person, Business and Username, plus More types. Choose the type deliberately; ordinary prose is not treated as an indicator. Right-click selected text for Search indicator. After a scan, open a plain-text indicator from the scan list; right-clicking a marked website link and choosing Search indicator opens that exact value in the side panel. Ordinary left-clicks, including website links, stay with the page. Right-click empty page space for Scan page. Scan page beside the Tools search field also finds indicators and supported tool inputs in visible page content. When enabled, Page suggestions checks a bounded snapshot on panel opening and tab changes. You can request inspection explicitly without enabling suggestions. Neither path starts a continuous page Trace.

The address bar

Type c, a space, then a value in the browser address bar:

c example.com            open matching domain sources
c example.com virustotal narrow to a named source
c Jane Doe               open the Tools type chooser
c ?example.com           send text to IOC Extractor

Source matching depends on what is enabled in Sources. The c ? form opens the Tools dashboard when no text follows it.

Sources, groups and settings

Sources lists built-in sources and My sources, where you can add your own. Enable only the destinations you want. A source appears for a value only when it has a template for that value's type. Open all sources in tab group follows your limit in Settings → Open Sources. Opening the same value again reuses matching tabs that remain open and reopens selected sources whose tabs you closed. Settings → Tab groups controls the group title and appearance.

Settings is one index for Tools preferences, Sources, Open Sources, Tab groups, Privacy and other browser settings. There is no separate Packs screen in the current navigation. Existing source-pack subscriptions and custom sources are retained; see the pack format guide for the underlying format.

Existing Saved records

If you used an earlier Explore and Saved workflow, your saved entities and findings have not been deleted; they are still stored in this browser. The current Tools-first navigation does not make that legacy workflow the starting point. Coeus has no accounts, so there is nothing to sign in to: your sources, settings and Saved items stay with the extension in this browser.

Where to go next