How to integrate Kaspersky Threat Data Feeds with LogRhythm

Kaspersky CyberTrace allows you to check URLs, file hashes and IP addresses contained in events that arrive in LogRhythm. The URLs, file hashes and IP addresses are checked against threat data feeds from Kaspersky or from other vendors or sources loaded to CyberTrace. During the matching process, Kaspersky CyberTrace determines the indicator category and generates an event with information on necessary actions to take.

To install the SIEM connector for LogRhythm:

1. Download the installation file for Kaspersky CyberTrace from this article.
2. Install the application using the instructions.