Installing Kaspersky Threat Intelligence Portal for Splunk Phantom

Before you use Kaspersky Threat Intelligence Portal for Splunk Phantom, you must obtain a certificate, user name, and password to have access to Kaspersky Threat Intelligence Portal. If you do not have access to Kaspersky Threat Intelligence Portal, please visit https://www.kaspersky.com/enterprise-security/contact?utm_content=css and submit your request.

If you have access to Kaspersky Threat Intelligence Portal, open its web page https://tip.kaspersky.com, specify the login and password, and accept the Terms and Conditions.

You are able to use Kaspersky Threat Intelligence Portal for Splunk Phantom under an account that has access to the Kaspersky Threat Intelligence Portal API. The administrator who provided you with the user name and password can give you access to this API.

To install Kaspersky Threat Intelligence Portal for Splunk Phantom:

1. In Splunk Phantom, click the Home split button and in the drop-down list select Apps.
2. Click INSTALL APP.

   The Install App dialog box appears.

   

   Install App dialog box

3. Specify the path to the archive that contains Kaspersky Threat Intelligence Portal for Splunk Phantom or drag the archive into the dialog box.
4. Click INSTALL.

After Kaspersky Threat Intelligence Portal for Splunk Phantom is installed, it appears on the Unconfigured Apps tab on the Apps page. To start using Kaspersky Threat Intelligence Portal for Splunk Phantom, you have to configure it.