Kaspersky Anti Targeted Attack (KATA) Platform

Enabling or disabling event chain scanning by Kaspersky TAA (IOA) rules

August 12, 2024

ID 277403

To enable or disable event chain scanning by Kaspersky TAA (IOA) rules:

  1. In the window of the application web interface, select the Settings section, Endpoint Agents subsection.
  2. Under Use TAA (IOA) rules for chains of events, do one of the following:
    • If you want to enable the functionality, set the Use rules for chains of events toggle switch to Enabled.
    • If you want to disable the functionality, set the Use rules for chains of events toggle switch to Disabled.

    This functionality is disabled by default.

Event chain scanning by Kaspersky TAA (IOA) rules is enabled or disabled.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.