EDRKATA. Integration with EDR (KATA)

Commands for managing the Endpoint Detection and Response component (KATA):

• Enable or disable the EDR component (KATA).

  The EDR component (KATA) provides interoperability with the Kaspersky Anti Targeted Attack Platform solution.

• Configure the connection to Kaspersky Anti Targeted Attack Platform servers.
• Display the current settings of the component.

Command syntax

avp.com START EDRKATA

avp.com STOP EDRKATA

avp.com edrkata /set /servers=<server address>:<port> /server-certificate=<path to the TLS certificate> [/timeout=<Central Node server connection timeout (s)>] [/sync-period=<Central Node server synchronization period (min)>]

avp.com edrkata /show

Operation
stop	Disable the EDR component (KATA).
start	Enable the EDR component (KATA).
set	Configure the EDR component (KATA). You can modify the following settings: Add Central Node servers (servers=<server address>:<port>). Add a TLS certificate(server-certificate=<path to the TLS certificate>). Set the Central Node server connection timeout (/timeout=<Central Node server connection timeout (seconds)>). Set the period for synchronization with the Central Node server (/sync-period=<Central Node server synchronization period (minutes)>).
show	Display the current settings of the component.

Page top