Feeds settings

You can manage the settings of feeds in the Kaspersky CyberTrace web user interface on the Settings → Feeds page. To access this page, you need to switch to the System management mode. This mode is accessible only to users with the Administrator role.

When you change the settings, you will be asked whether to update the feeds.

The System management mode allows you to:

• Import a certificate for Kaspersky Threat Data Feeds
• Specify the feeds update period
• Enable and disable feeds
• Select available fields for a feed
• Specify filtering rules for a feed
• Truncate a feed
• Specify a retention period for feed records
• Launch a feeds update manually
• Add custom or third-party feeds
• Configure a custom or third-party feed

Feed tabs

Feeds are listed on the following tabs:

• Kaspersky

  This tab contains Kaspersky Threat Data Feeds.

• <Vendor name>

  Custom and third-party threat data feeds are grouped into tabs by vendor.

  If no vendor name is provided for a feed, it is listed on the Custom feeds tab.

  If there are no custom and third-party feeds, these tabs are not displayed.

• OSINT

  This tab contains OSINT feeds.

• Internal TI

  This tab contains the Internal TI supplier, with indicators added to the database by users.

Updates functionality (including providing anti-malware signature updates and codebase updates) may not be available in the software in the U.S.

In this section About Kaspersky feeds, custom, and third-party feeds Importing a certificate for Kaspersky Threat Data Feeds Specifying the feeds update period Enabling and disabling feeds Selecting available fields for a feed Specifying filtering rules for a feed Truncating a feed Specifying a retention period for feed records Launching a feeds update manually Adding a custom or third-party feed Adding a custom or third-party feed of email type Configuring a custom or third-party feed

See also: Feeds settings of a tenant

Page top