EDRKATA. Integration with EDR (KATA)

Commands for managing the Endpoint Detection and Response component (KATA):

• Enabling or disabling the EDR (KATA) component.

  The EDR component (KATA) provides interoperability with the Kaspersky Anti Targeted Attack Platform solution.

• Configuring the connection to Kaspersky Anti Targeted Attack Platform servers.
• Displaying the current settings of the component.

To run the command, go to the folder where the Kaspersky Endpoint Security executable file is located. You can also add the executable file path to the %PATH% system variable and run the command without navigating to the application folder.

Command syntax

avp.com START EDRKATA

avp.com STOP EDRKATA

avp.com edrkata /set /servers=<server address>:<port> /server-certificate=<path to the TLS certificate> [/timeout=<Central Node server connection timeout (s)>] [/sync-period=<Central Node server synchronization period (min)>]

avp.com edrkata /show

Operation
stop	Disable the EDR (KATA) component.
start	Enable the EDR (KATA) component.
set	Configure the EDR (KATA) component. You can modify the following settings: Add Central Node servers (servers=<server address>:<port>) Add a TLS certificate (server-certificate=<path to the TLS certificate>) Set the Central Node server connection timeout (/timeout=<Central Node server connection timeout (s)>) Set the period for synchronization with the Central Node server (/sync-period=<Central Node server synchronization period (min)>)
show	Display the current settings of the component.

Page top