Kaspersky Threat Data Feeds

Can I download a ready-to-use SIEM connector for Kaspersky Threat Data Feeds?

Back to article list

Yes. We have prepared SIEM connectors (based on Kaspersky CyberTrace) for the following SIEM solutions:

• MicroFocus ArcSight
• Splunk
• IBM QRadar
• RSA NetWitness
• LogRhythm
• McAfee ESM

We also offer a Kaspersky CyberTrace for Log Scanner tool that can be used to easily integrate with other SIEM solutions. 

Please note that Kaspersky Threat Data Feeds can also be supported by a SIEM solution using its in-built capabilities, without Kaspersky CyberTrace, when all the matching logic (Data Feeds and incoming events) is executed inside the SIEM solution. In this case, performance is likely to drop. 

Also, please be aware that all SIEM connectors include Demo Data Feeds. To purchase a commercial Data Feeds license, please contact our sales team.

Back to article list