Filtering detections by indicator tags

In the Detections section of Kaspersky CyberTrace Web, you can filter detections by the tags of the indicators that triggered the detections.

To filter detections by indicator tags:

  1. Click the Tag column heading.

    The filter form opens.

  2. Check the indicator tags to filter detections by these tags. You can select multiple tags.
  3. Click OK.

Kaspersky CyberTrace will only show detections that contain all of the specified tags.

Filtering detections by total tag weight

Each tag has its own weight, from 0 to 5. If several tags are assigned to an indicator, their weight is summed up. You can filter detections based on the total tag weight of the indicator that triggered the detection.

To filter detections by total tag weight:

  1. Click the Total tag weight column heading.

    The filter form opens.

  2. Specify the minimum and maximum tag weight.
  3. Click Apply.
Page top