Choosing the best feeds for your environment
22 August 2024
ID 175070
You can reduce the load on your system by choosing the optimal feeds for your environment. Kaspersky CyberTrace Web allows you to compare the feeds that you use, and find and disable feeds that are not effective for your environment.
Effective feeds
Following are characteristics that can help you recognize effective feeds for your solution:
- High number of detections
- Frequent updates
The feeds that are updated frequently contain more accurate information.
Ineffective feeds
Following are characteristics that can help you recognize ineffective feeds for your solution:
- Many of the objects that are detected correctly are not harmful in your environment
- Many of the detections are false positives
- The feed contains a lot of records, but produces a low number of detections
Comparing feeds
To choose the best feeds for your solution, you can evaluate them by using the following criteria:
- Number of detections
- Number of false positives
- Number of records
- Update frequency
You can compare different characteristics of feeds by looking at the Dashboard of Kaspersky CyberTrace Web.
- To compare the number of detections, number of false positives, and number of records of different feeds, see tables and charts in the Supplier statistics section on the Dashboard tab of Kaspersky CyberTrace Web.
- To learn which types of indicators are frequently detected in your environment, see tables and charts in the Indicator statistics section.
Viewing feed fields
To decide whether to use a feed, you may want to see the list of its available fields. You can view the list of fields of a particular feed in the Kaspersky CyberTrace Web user interface.
To view the list of fields of a particular feed: