Overall, Kaspersky Threat Lookup allows SOC operators to prioritize and act efficiently in the typical scenario of hundreds and thousands alerts received every day.
Kaspersky Threat Lookup offers enterprises the same level of intelligence that Kaspersky Lab specialists use to analyze the most sophisticated threats, and includes indicators of compromise for these new attacks.
The solution makes it possible to match data obtained during an investigation due to vast knowledge of malicious objects, as well as access to one of the largest databases of clean objects, part of the Kaspersky Whitelist service.
One of the early adopters of Kaspersky Threat Lookup service is INTERPOL. Kaspersky Lab has been offering early access to the organization’s threat intelligence according to the expertise sharing agreement to help investigate cybercrime.
“In 2016 we have rapidly expanded our range of Security Intelligence Services, including Threat Data Feeds, to provide businesses with the actionable intelligence required for faster detection. But in order to significantly reduce recovery costs, businesses need to improve detection together with response and forensic capabilities. That is, they need to understand the scope of the problem, identify the source of the security event and collect necessary intelligence to mitigate the threat,” commented Veniamin Levtsov, Vice President, Enterprise Business at Kaspersky Lab.
“The Kaspersky Threat Lookup portal is an important addition to the family of Security Intelligence Services that directly addresses these challenges. It provides instant access to Kaspersky Lab’s threat intelligence directly from cloud sources and contains comprehensive information on requested file hash, URL or IP,” added Levtsov.
More information about Kaspersky Lab’s Threat Lookup services can be found on the company’s Security Intelligence Services portal. Extra details are available in the detailed service description (PDF).
