Using Kaspersky CyberTrace App for QRadar
April 11, 2024
ID 171421
This section describes how you can use Kaspersky CyberTrace App for QRadar.
Search for data in feeds
You can search feeds for a file hash, IP address, or URL. For this purpose, in the search box type the data you want to search for, and then press Enter.
Search box
Kaspersky CyberTrace App for QRadar will display the feed records that contain the data you specified.
Configuring charts
You can configure the charts so that they will display data accumulated during a specified period: 15 minutes, an hour, a day, a week, or a month.
Also, you can turn on or off regular automatic updating of charts.
Filtering by categories
The Detection events by category chart displays only data that relates to categories that are enabled. To disable a category or to enable a disabled category, select it in the list.