Kaspersky Endpoint Agent

Prerequisites for creating threat development chain

This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

The following prerequisites must be met to create a threat development chain:

• A compatible version of Endpoint Protection Platform (Kaspersky Security for Windows Server 11 or later or Kaspersky Endpoint Security for Windows 11.4.0 or later) is installed on the managed device with Kaspersky Endpoint Agent.
• Kaspersky Endpoint Agent is activated with the Kaspersky EDR Optimum key.
• Kaspersky Endpoint Agent and Endpoint Protection Platform are managed by Kaspersky Security Center Web Console.
• Kaspersky Endpoint Agent web plug-in is installed on a device with Kaspersky Security Center Web Console installed.
• An active policy is applied to the device. Creation of a threat development chain and forced usage of these settings is enabled in the properties of this policy.

  If a policy is not applied to a managed device, creation of the threat development chain must be enabled in the application properties.

  By default, creation of the threat development chain is disabled in the application properties for the managed device.