Choosing the best feeds for your environment

You can reduce the load on your system by choosing the optimal feeds for your environment. Kaspersky CyberTrace Web allows you to compare the feeds that you use, and find and disable feeds that are not effective for your environment.

Effective feeds

Following are characteristics that can help you recognize effective feeds for your solution:

• High number of detections
• Frequent updates

  Feeds that are updated frequently contain more accurate information.

Ineffective feeds

Following are characteristics that can help you recognize ineffective feeds for your solution:

• Many of the objects that are detected correctly are not harmful in your environment
• Many of the detections are false positives
• The feed contains a lot of records, but produces a low number of detections

Comparing feeds

To choose the best feeds for your solution, you can evaluate them by using the following criteria:

• Number of detections
• Number of false positives
• Number of records
• Update frequency

You can compare different characteristics of feeds by looking at the Dashboard of Kaspersky CyberTrace Web.

• To compare the number of detections, number of false positives, and number of records of different feeds, see the tables and charts in the Supplier statistics widget on the Dashboard page of Kaspersky CyberTrace Web.
• To learn which types of indicators are frequently detected in your environment, see the tables and charts in the Matching statistics widget.

Viewing feed fields

To decide whether to use a feed, you may want to see the list of its available fields. You can view the list of fields of a particular feed in the Kaspersky CyberTrace Web user interface.

To view the list of fields of a particular feed:

1. In Kaspersky CyberTrace Web, open the Settings → Feeds page.
2. Click the link in the Actions column for the required feed, to view its properties.

Page top