Kaspersky Enrichment
Automatic deploy
Supported by Filigran
Adversary & Campaign Insights
Overview
Enriches file observables in OpenCTI with threat intelligence from the Kaspersky Threat Intelligence Portal, including verdicts, malware family associations, and contextual threat data.
The OpenCTI Kaspersky enrichment connector allows you to enrich your observables with intelligence from the Kaspersky Threat Intelligence Portal. The connector queries the Kaspersky API to retrieve contextual information and threat data associated with your indicators/observables.
At this time, the connector supports file observables enrichment with Kaspersky's threat intelligence. Support for additional observable types (IP addresses, domains, and URLs) will be added in future releases.
Basic information
Connectors
6.8.15
6.8.15
1