Step 3 (optional). Configuring the lookup script (distributed deployment)

The lookup script is used to match individual URLs, IP addresses, and hashes to Kaspersky Threat Data Feeds. It can be invoked from the Indicators lookup tab in Kaspersky CyberTrace App Search Head.

To configure the lookup script:

1. In Kaspersky CyberTrace App, go to the Indicators lookup tab.
2. Specify Kaspersky CyberTrace connection strings:
   • In the Kaspersky CyberTrace address field, specify the IP address of Kaspersky CyberTrace
   • In the Kaspersky CyberTrace port field, specify the port that Kaspersky CyberTrace uses

The script is ready for use.