Choosing the best feeds for your environment

You can reduce the load on your system by choosing the optimal feeds for your environment. Kaspersky CyberTrace Web allows you to compare the feeds that you use, and find and disable feeds that are not effective for your environment.

Effective feeds

Following are characteristics that can help you recognize effective feeds for your solution:

• High number of detections
• Frequent updates

  The feeds that are updated frequently contain more accurate information.

Ineffective feeds

Following are characteristics that can help you recognize ineffective feeds for your solution:

• Many of the objects that are detected correctly are not harmful in your environment
• Many of the detections are false positives
• The feed contains a lot of records, but produces a low number of detections

Comparing feeds

To choose the best feeds for your solution, you can evaluate them by using the following criteria:

• Number of detections
• Number of false positives
• Number of records
• Update frequency

You can compare different characteristics of feeds by looking at the Dashboard of Kaspersky CyberTrace Web.

• To compare the number of detections, number of false positives, and number of records of different feeds, see tables and charts in the Supplier statistics section on the Dashboard tab of Kaspersky CyberTrace Web.
• To learn which types of indicators are frequently detected in your environment, see tables and charts in the Indicator statistics section.

Viewing feed fields

To decide whether to use a feed, you may want to see the list of its available fields. You can view the list of fields of a particular feed in the Kaspersky CyberTrace Web user interface.

To view the list of fields of a particular feed:

1. Open the Settings tab of Kaspersky CyberTrace Web.
2. Select the Feeds tab.
3. Click the name of the feed to view its properties.