# Chrome Sense Beta plugin flagged as malware

**URL:** <https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962>\
**Category:** Kibana\
**Created:** [October 31, 2017, 10:22pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962 "2017-10-31T22:22:47Z")\
**Posts on this page:** 19\
**Page:** 2

<div class="post-metadata">

**Author:** ![aellis](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@aellis](https://discuss.elastic.co/u/aellis)\
**Post date:** [November 6, 2017, 4:42pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/22 "2017-11-06T16:42:05Z")

</div>

As an elastic subscriber, kibana console does not provide the following critical features that sense provided:

1. sense provided an interface that is not tied into elasticsearch the way kibana is tied in. If elasticsearch is in trouble, so, typically, is kibana.
2. sense allows me to manage my own list of often used queries easier than kibana console.

Some of this is covered previously, but I would encourage elastic to support a simple plugin of this type. For now, I'm using curl quite a bit when Kibana Console does not provide what I need.

---

<div class="post-metadata">

**Author:** ![Taras\_Kohut](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/taras_kohut/32/12118_2.png) [@Taras\_Kohut](https://discuss.elastic.co/u/Taras_Kohut)\
**Post date:** [November 6, 2017, 6:00pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/23 "2017-11-06T18:00:27Z")

</div>

Unfortunately chrome disabled this extension again.  
Version 62.0.3202.75 (Official Build) (64-bit)  
 ![sense](https://us1.discourse-cdn.com/elastic/original/3X/2/6/26da7fa1a7d78fbd14e1f1f7b3bc28f7285b23d9.png)

---

<div class="post-metadata">

**Author:** ![Tirthankar\_Bhowmick](https://avatars.discourse-cdn.com/v4/letter/t/a88e4f/32.png) [@Tirthankar\_Bhowmick](https://discuss.elastic.co/u/Tirthankar_Bhowmick)\
**Post date:** [November 6, 2017, 6:25pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/24 "2017-11-06T18:25:13Z")

</div>

Thank you for the screenshot. Try this new [zip](https://www.dropbox.com/s/xjoe4aj35fazzac/sense_chrome_plugin.zip?dl=0) in the same location. I changed the key and name of the plugin. It worked for me, I tried restarting chrome a few times. Let me know if it works for you as well.

---

<div class="post-metadata">

**Author:** ![Taras\_Kohut](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/taras_kohut/32/12118_2.png) [@Taras\_Kohut](https://discuss.elastic.co/u/Taras_Kohut)\
**Post date:** [November 6, 2017, 6:37pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/25 "2017-11-06T18:37:06Z")

</div>

Thank you, I'll try it.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 6, 2017, 7:11pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/26 "2017-11-06T19:11:36Z")

</div>

Thanks Andy.  
Please do raise a support request with this as well, it'll help us pass the request to the right people 🙂

---

<div class="post-metadata">

**Author:** ![Stepane](https://avatars.discourse-cdn.com/v4/letter/s/a88e4f/32.png) [@Stepane](https://discuss.elastic.co/u/Stepane)\
**Post date:** [November 7, 2017, 12:06am UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/27 "2017-11-07T00:06:14Z")

</div>

Hi,

I have make a fork with autocomplete indices, types and fields work on ELS 2.\* and 5.\* :

> **[StephaneBour/sense-chrome](https://github.com/StephaneBour/sense-chrome)**
>
> sense-chrome - Sense (elasticsearch) for chrome extension

---

<div class="post-metadata">

**Author:** ![Teddy\_Santos](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/teddy_santos/32/23863_2.png) [@Teddy\_Santos](https://discuss.elastic.co/u/Teddy_Santos)\
**Post date:** [November 7, 2017, 3:27am UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/28 "2017-11-07T03:27:37Z")

</div>

Currently using this new update. Will update you once it gets flagged, or disabled again..

Thanks.

---

<div class="post-metadata">

**Author:** ![deomis\_deomis](https://avatars.discourse-cdn.com/v4/letter/d/c89c15/32.png) [@deomis\_deomis](https://discuss.elastic.co/u/deomis_deomis)\
**Post date:** [November 7, 2017, 7:10am UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/29 "2017-11-07T07:10:17Z")

</div>

Hi everybody,

Is it possible to retrieve my requests ?  
Indeed i had a lot requests saved in the sense extension

---

<div class="post-metadata">

**Author:** ![softwaredoug](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/softwaredoug/32/22681_2.png) [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Post date:** [November 8, 2017, 1:54pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/30 "2017-11-08T13:54:10Z")

</div>

Thanks rashmi! I will say as primarily a search user of Elasticsearch, the Sense Chrome extension is invaluable. As a search-focused user, installing Kibana for Sense is overkill. So to me the missing Sense/Chrome extension is a missing piece in the ecosystem.

I don't consider Postman a good replacement for Sense. Postman is heavy-weight and general purpose. Sense in Chome was lightweight and focused on Elasticsearch.

---

<div class="post-metadata">

**Author:** ![Dave\_Waters](https://avatars.discourse-cdn.com/v4/letter/d/e68b1a/32.png) [@Dave\_Waters](https://discuss.elastic.co/u/Dave_Waters)\
**Post date:** [November 8, 2017, 5:17pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/31 "2017-11-08T17:17:17Z")

</div>

Has anyone figured out why it was flagged as malware though?

---

<div class="post-metadata">

**Author:** ![lask001](https://avatars.discourse-cdn.com/v4/letter/l/4da419/32.png) [@lask001](https://discuss.elastic.co/u/lask001)\
**Post date:** [November 8, 2017, 5:25pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/32 "2017-11-08T17:25:37Z")

</div>

Yes, because google thinks they know best. They removed the ability for users to enable developer mode and get around the issue as well. It's really frustrating.

---

<div class="post-metadata">

**Author:** ![cbetheridge](https://avatars.discourse-cdn.com/v4/letter/c/85e7bf/32.png) [@cbetheridge](https://discuss.elastic.co/u/cbetheridge)\
**Post date:** [November 8, 2017, 5:34pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/33 "2017-11-08T17:34:48Z")

</div>

My guess is that Google has changed something regarding what extensions are allowed to do or what APIs they are allowed to access, and it's being flagged as malware for breaking the new 'rules' or accessing data in an exploitable way.

For example, i believe the extensions needs to pull some tricks to bypass CORS on it's web requests, and something like that is a good indicator of real malware even if it's legit in this case.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 8, 2017, 7:57pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/34 "2017-11-08T19:57:40Z")

</div>

We've posted a blog on this topic - [https://www.elastic.co/blog/sense-chrome-plugin-malware-issue](https://www.elastic.co/blog/sense-chrome-plugin-malware-issue)

---

<div class="post-metadata">

**Author:** ![Stepane](https://avatars.discourse-cdn.com/v4/letter/s/a88e4f/32.png) [@Stepane](https://discuss.elastic.co/u/Stepane)\
**Post date:** [November 8, 2017, 9:24pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/35 "2017-11-08T21:24:28Z")

</div>

Thanks, i have update my fork for include your link.

---

<div class="post-metadata">

**Author:** ![Nithin\_Rahane](https://avatars.discourse-cdn.com/v4/letter/n/bbe5ce/32.png) [@Nithin\_Rahane](https://discuss.elastic.co/u/Nithin_Rahane)\
**Post date:** [November 13, 2017, 4:39am UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/36 "2017-11-13T04:39:21Z")

</div>

Thank you @Tirthankar_Bhowmick !!

---

<div class="post-metadata">

**Author:** ![QingminChen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/qingminchen/32/24380_2.png) [@QingminChen](https://discuss.elastic.co/u/QingminChen)\
**Post date:** [November 17, 2017, 10:29am UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/37 "2017-11-17T10:29:55Z")

</div>

It is really useful！

---

<div class="post-metadata">

**Author:** ![aphotix](https://avatars.discourse-cdn.com/v4/letter/a/3d9bf3/32.png) [@aphotix](https://discuss.elastic.co/u/aphotix)\
**Post date:** [December 6, 2017, 3:46pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/38 "2017-12-06T15:46:23Z")

</div>

I looked over an old version of the sense extension source code and the disabled source and found that the extension was attempting to load a google docs spreadsheet.-- The extension is still on the hard drive in your chrome profile if you didn't delete the extension, as a note don't double click on .js files, open them directly within a text editor's file dialog if your are curious.

The disabled extension is completely different from the older source.

If I had to guess, I would say someone hacked the developer account associated with the sense extension, and uploaded a completely different malware extension masquerading as the sense extension. Google caught it and flagged it as malware.

---

<div class="post-metadata">

**Author:** ![cbetheridge](https://avatars.discourse-cdn.com/v4/letter/c/85e7bf/32.png) [@cbetheridge](https://discuss.elastic.co/u/cbetheridge)\
**Post date:** [December 11, 2017, 8:10pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/39 "2017-12-11T20:10:43Z")

</div>

Thanks for diving the code David.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 8, 2018, 8:10pm UTC](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962/40 "2018-01-08T20:10:47Z")

</div>

Closed on January 8, 2018, 8:10pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/chrome-sense-beta-plugin-flagged-as-malware/105962.md?page=1)
