Kaspersky Anti Targeted Attack Platform Help

What's new

Hardware and software requirements

Program architecture

Program licensing

Installation and initial configuration

• Standard Deployment Schemes
• Preparing for installing program components
• Procedure for installing program components
• Installation: Sandbox component
• Installing and configuring the Central Node and Sensor components
• Configuring integration with the Endpoint Agent component

Upgrading the program

Distributed solution

Contacting the Technical Support Service

API for interacting with external systems

Sizing Guide

Managing the Sandbox component through the web interface

Managing Kaspersky Endpoint Agent

Working in the program web interface - For an administrator

• Monitoring program operation
• Managing accounts
• Managing Central Node, PCN, and SCN servers
• Managing the Sensor component
• Managing the Endpoint Agent component
• Integration with the Sandbox component
• Integration with external systems
• Integration with an SIEM system

Working in the program web interface - For a security officer

• Monitoring program operation
• Filtering and searching alerts
• Events database threat hunting
• Tasks
• Policies
• User rules
• Storage and Quarantine
• Reports
• Object White List and exclusions for TAA and IDS rules
• Alerts with the VIP status
• Sending notifications about alerts and about program operation problems