Step 3 (optional). Configuring the lookup script (distributed deployment)
The lookup script is used to match individual URLs, IP addresses, and hashes to Kaspersky Threat Data Feeds. It can be invoked from the Indicators lookup tab in Kaspersky CyberTrace App for Search Head.
To configure the lookup script:
In Kaspersky CyberTrace App, go to the Indicators lookup tab.
Specify Kaspersky CyberTrace connection strings:
In the Kaspersky CyberTrace address field, specify the IP address of Kaspersky CyberTrace
In the Kaspersky CyberTrace port field, specify the port that Kaspersky CyberTrace uses