Kaspersky Enrichment
Automatic deploy
Verified
Enrichment & Analysis
Overview
The OpenCTI Kaspersky enrichment connector allows you to enrich your observables with intelligence from the Kaspersky Threat Intelligence Portal. The connector queries the Kaspersky API to retrieve contextual information and threat data associated wi
The OpenCTI Kaspersky enrichment connector allows you to enrich your observables with intelligence from the Kaspersky Threat Intelligence Portal. The connector queries the Kaspersky API to retrieve contextual information and threat data associated with your indicators/observables.
At this time, the connector supports file observables enrichment with Kaspersky's threat intelligence. Support for additional observable types (IP addresses, domains, and URLs) will be added in future releases.
Basic information
Connectors
Internal enrichment
6.8.15
7.260706.0
1