Viewing the incident card

This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

An incident card is available in the window that contains the list of incidents. The list of incidents is available in the Report on threats or in the Alerts subsection of the Monitoring and reporting section in Kaspersky Security Center Web Console or Kaspersky Security Center Cloud Console.

For the application to create a threat development chain, the preconditions for creating threat development chain must be met.

If you add a license key for EDR Optimum, the Alerts subsection will automatically appear in the main menu in the Monitoring and reporting section. You can also configure the display of the Alerts subsection in the properties of Kaspersky Security Center Web Console or Kaspersky Security Center Cloud Console interface. For detailed information refer to Kaspersky Security Center Help.

To view the incident card in the Alerts subsection:

1. In the main Web Console window open the Monitoring and reporting → Alerts section.
2. Select an incident and click the more details link.

The incident card will be displayed.

To view the incident card in the Report on threats:

1. In the main Web Console window open the Monitoring and reporting → Reports section.
2. Select the Report on threats option and click the Show report button.
3. In the report window on the Details tab, select the incident and click the Present link.

The incident card will be displayed.

Page top