How to integrate Kaspersky Threat Data Feeds with LogRhythm

Kaspersky CyberTrace allows you to check URLs, file hashes and IP addresses contained in events that arrive in LogRhythm. The URLs, file hashes and IP addresses are checked against threat data feeds from Kaspersky or from other vendors or sources loaded to CyberTrace. During the matching process, Kaspersky CyberTrace determines the indicator category and generates an event supplemented with actionable context.

To install the SIEM connector for LogRhythm:

1. Download Kaspersky CyberTrace. Find the download files for Kaspersky CyberTrace in this article.
2. Follow the instructions from Online Help to configure LogRhythm.

The SIEM connector for LogRhythm will be installed.