Сomprehensive digital risk
protection service

Kaspersky
Digital Footprint
IntelligenceQuestions
for experts
What’s the best way to launch an
attack against your organization?
What is the most cost-efficient way
to attack you?
What information is available to an
attacker targeting your business?
Has your infrastructure alreadybeen compromised without yourknowledge?
Kaspersky Digital Footprint Intelligenceanswers these and other questions
as our experts piece together
a comprehensive picture of your attack
status, identifying weak spots ripe for
exploitation and revealing evidenceof past, present and even planned
attacks.

Intro
As your business grows, the complexity and distribution of your IT
environments grow too, presenting a challenge: protecting your widelydistributed digital presence without direct control or ownership.
Dynamic and interconnected environments enable companies to derivesignificant benefits. However, ever-increasing interconnectivity is also
expanding the attack surface. As attackers become more skilled, it’svital not only to have an accurate picture of your organization’s online
presence, but also to be able to track its changes and react to externalthreats aimed at exposed digital assets.
Organizations use a wide range of security tools in their security
operations but there are still digital threats that loom which requirevery specific capabilities — to detect and mitigate data leakages,
monitor plans and attack schemes of cybercriminals located on dark
web forums, etc. To help security analysts explore the adversary’sview of their company resources, promptly discover the potential
attack vectors available to them and adjust their defenses accordingly,
Kaspersky has created Kaspersky Digital Footprint Intelligence.

Kaspersky Digital Footprint Intelligence provides
Kaspersky Digital Footprint Intelligence is a comprehensive digital risk protection service that helps customers
monitor their digital assets and detect threats from the surface, deep, and dark webs.

Network Reconnaissance

Dark Web Monitoring

Discovery of Data Leaks

Identification of the customer’s network
resources and exposed services
which are a potential entry point for
an attack. Tailored analysis of existing
vulnerabilities, with further scoring andcomprehensive risk evaluation basedon the CVSS base score, availabilityof public exploits, penetration testing
experience and location of the network
resource (hosting/infrastructure).

Continuous monitoring of dozens
of dark web resources (forums,ransomware blogs, messengers,tor sites, etc.), detecting any references
and threats relating to your company,
clients and partners. Analysis of active
targeted attacks or attacks that are
being planned, APT campaigns aimed
at your company, industry and regionsof operation.

Detection of compromised employees,
partner and client credentials, bankcards, phone numbers and othersensitive information that can be used
to carry out an attack or pose
reputational risks for your company.

Threats Detection

Multitenancy support

Monitoring of fraudulent activities that can damage acompany’s reputation and/or deceive customers.

Enhanced capabilities for managed security service providers(MSSPs) and large organizations with a multi-branch structure.

How it works
ConfigureCollect

React

FilterInformation discovery
about the company’sdigital assets

Automated datacollection from surface,deep and dark webs,
and the Kaspersky
knowledgebase

Providing operational
threat notifications
on Kaspersky ThreatIntelligence Portal or viaAPI

Threat detection, analysisand prioritization managed
by analysts

Key service deliverables
123

Useful dashboards with detailed
statistics

Search quota in the dark web
database

Threat alerts in ThreatIntelligence Portal

456

Search quota in the social media
database

Presentations and Q&A sessions
with experts

Machine-readable data

7
Analytical reports compiled
by our experts** Add-on service

8
Takedown requests*

Threat types
Kaspersky Digital Footprint Intelligence empowers organizations to rapidly and efficiently respond to potential
threats with real-time alerts. It reduces the likelihood of harm to brand reputation, customer trust, and overallbusiness operations. Companies can customize the service’s monitoring capabilities to meet their specificneeds, and comprehensive reporting and analytics offer valuable insights into the scope and impact of brandinfringement and other potential risks.

Network perimeter-related threats

Dark web-related threats• Misconfigured network services• Identification of vulnerabilities• Defaced or compromised resources• Fraud schemes and cybercriminals’ plans• Data breach sale
• Insider activities

Data leakages

Malware-related threats• Compromised corporate resources• Compromised credit cards• Compromised credentials• Phishing attacks• Targeted attacks• APT campaigns

Intelligence sources
It’s essential that our customers have a comprehensive understanding of their external security posture.
To provide this information, Kaspersky security analysts collect and aggregate information from the following
intelligence sources:

Your unstructured data
• IP addresses• Company domains• Brand names• Keywords• Network ranges• BIN/IIN card numbers• Employee information

Network perimeter inventory
Surface, deepand dark web search
Kaspersky
Knowledge Base search

Threat alerts
Real-time search acrossKaspersky's, surface
and dark web sources
Takedown requests*
Analytical reports*

Service delivery capabilities
Digital Footprint Intelligence provides advanced capabilities for managed security service providers (MSSPs)
and large multi-branch organizations.
Kaspersky Threat Intelligence Portal interface, through which DFI service is provided, allows MSSPs todifferentiate access to information related either to subsidiaries of large organizations or to individualorganizations to which MSSP provides security management services.

Creation of separate tenants and access control configuration throughadministration panel
Management is accomplished by creating tenants - logical entities created for each new structure, which must
be managed separately from the others.

1

2

Access to all tenant-specific threat notifications
and assets

Seamless tenant group switching and viewing
information on behalf of the tenant

3

4

Access control by API token and TOTP

Capability to change tenant licenses* Add-on service

Centralized statistics on each tenant's threats and assets
Providing the service to a large number of organizations, it is necessary to have tools for monitoring the current state of tenants. Tenant Center displays summary for each tenant, including number of detected threats
with their criticality level, as well as information on the assets that tenant would like to monitor and their statuses.

Detailed monitoring
MSSP or head office can view a detailed summary for each tenant:• The total number of threats identified over a given period and their criticality to the organization• Categorization of detected threats• The most vulnerable tenant’s assets• Threat landscape changing over time

Asset management
Tenant is able to add new assets for monitoring both separately via Kaspersky Threat Intelligence Portal interface and by uploading files with a large amount of assets. This approach essentially simplifies the process ofkeeping assets up-to-date.

Business values
Kaspersky Digital Footprint Intelligence delivers powerful benefits and significant value to your organization:

Protects your brand

Reduce cyber risks

React faster

Detect potential threats in real-time
to protect your brand reputation,
preserve customer trust, reduce the riskof financial loss and damage to business
operations.

Equip your key stake holders (CxOand Board) with information on where
to focus cybersecurity spendingby revealing gaps in the current setup
and the risks they bring.

Additional context for security alerts
improves incident response andreduces your Mean Time To Respond(MTTR).

Reduce the attack
surface

Understand youradversaries

Know the unknown

Manage your company’s digitalpresence and control external network
resources to minimize attack vectors
and vulnerabilities that can be used
for an attack.

Forewarned is forearmed — knowwhat cybercriminals are planning anddiscussing about your company on thedark web so that you’re prepared for it.

Improve your ability to withstandcyberattacks and identify threatsoutside the jurisdiction of your internal
security teams.

Service delivery efficiency
Rapid start and easy scaling in multitenancy mode saves time both for managed security service providers (MSSP) and their customers,
as well as large multi-affiliate organizations.

To find out more about the various subscription plans,
please get in touch with our teamGet in touchLearn more

www.kaspersky.com© 2024 AO Kaspersky Lab.
Registered trademarks and service marks
are the property of their respective owners.

#kaspersky#bringonthefuture