About Kaspersky CyberTrace App for QRadar

Kaspersky CyberTrace App is a QRadar application that provides visualization of Kaspersky CyberTrace data and interaction with Kaspersky CyberTrace. It provides the following features:

• Search within the feeds database
• Charts that contain information about detections
• Lists of most popular indicators of compromise (IoC) detected by Kaspersky CyberTrace Service
• Information about Kaspersky CyberTrace Service health

  This information is displayed in the Service events table. The KL_ALERT_OutdatedFeed events are marked with the Outdated feed icon ().

• Last 10 alerts from Kaspersky CyberTrace Service

Some custom event properties are provided together with Kaspersky CyberTrace App. These event properties are the fields of detection alerts sent by Kaspersky CyberTrace Service.

Page top