How to integrate Kaspersky Threat Data Feeds with McAfee ESM

Kaspersky CyberTrace is a complex software platform that allows you to check URLs, file hashes, and IP addresses in events arriving in McAfee ESM (Enterprise Security Manager). The URLs, file hashes, and IP addresses are matched against Kaspersky Threat Data Feeds. During the matching process, the categories and context are also determined.

To install the SIEM application for McAfee ESM:

1. Download the installation file for Kaspersky CyberTrace from this article.
2. Install and configure Kaspersky CyberTrace using these instructions.

The integration has been tested with McAfee ESM version 11.