Kaspersky
Ask the Analyst

Kaspersky Ask the Analyst
Continuous
threat researchenables Kaspersky
to discover, infiltrate andmonitor closed communities
and dark forums worldwide
frequented by adversaries
and cybercriminals.
Our analysts leverage thisaccess to proactively detectand investigate the mostdamaging and notorious
threats, as well as threats
tailored to target specificorganizations

Cybercriminals are constantly developing sophisticated ways ofattacking businesses. Today’s volatile and fast-growing threat
landscape features increasingly agile cybercrime techniques.
Organizations face complex incidents caused by non-malware
attacks, fileless attacks, living-off-the-land attacks, zero-day
exploits — and combinations of all of these built into complex threats,
APT-like and targeted attacks.

In an age of business-crippling cyberattacks,
cybersecurity professionals are more important
than ever, but finding and retaining them isn’t
easy. And even if you have a well-establishedcybersecurity team, your experts can’t
always be expected to fight the war against
sophisticated threats alone — they need to beable to call on expert third-party assistance.
External expertise can shed light on the likely
paths of complex attacks and APTs, and deliveractionable advice on the most decisive way
to eliminate them.

Ask the AnalystDeliverables(Unified request-basedsubscription)

The Kaspersky Ask the Analyst service extends our ThreatIntelligence portfolio, enabling you to request guidance and insights
into specific threats you’re facing or interested in. The service tailors
Kaspersky’s powerful threat intelligence and research capabilities
to your specific needs, enabling you to build resilient defenses
against threats targeting your organization.

APT and Crimeware

Malware Analysis

Additional information on published reports andongoing research (on top of APT or CrimewareIntelligence Reporting service) 1• Malware sample analysis• Recommendations on further remediation actions

Descriptions of threats, vulnerabilities
and related IoCs

Dark Web Intelligence2• General description of a specific malware family• Additional context for threats (related hashes,URLs, CnCs, etc.)• Information on a specific vulnerability (howcritical it is, and the corresponding protection
mechanisms in Kaspersky products)• Dark Web research on particular artefacts, IPaddresses, domain names, file names, e-mails,
links or images• Information search and analysis

ICS Related Requests

1

Available to customers with active APT and/orCrimeware Intelligence Reporting only
2

Already included in the Kaspersky Digital
Footprint Intelligence subscription• Additional information on published reports• ICS Vulnerability information• ICS threat statistics and trends for region /industry• ICS Malware Analysis Information on regulations
or standards

How it works
Service benefits

Augment your expertise
Get on-demand access to industryexperts without having to search forand invest in hiring hard to find full-time
specialists

Accelerate investigations
Effectively scope and prioritize incidents
based on tailored and detailed contextual
information

Respond fast
Respond to threats and vulnerabilities fast
using our guidance to block attacks via
known vectors

Kaspersky Ask the Analyst can be purchased separately or on topof any of our threat intelligence services.
You can submit your requests via Kaspersky Company Account,
our corporate customer support portal. We will respond by email,but if necessary and agreed on by you, we can organize a conference
call and/or screen sharing session. Once your request has been
accepted, you’ll be informed of the estimated timeframe forprocessing it.

Service use cases:

Clarify
any details
in previously
published threat
intelligencereports

Get additional
intelligence
for alreadyprovided IoCs

Obtain details on
vulnerabilities andrecommendations
on how to protect
against their
exploitation

Get additional
details on
the specificDark Web
activities you’reinterested in

Get an overview
malware family
report including
the malware
behavior, its
potential impact
and details
about any
related activity
Kaspersky has
observed

Effectively
prioritize alerts/
incidents
with detailed
contextual
information andcategorization
for related IoCs
provided via
short reports

Requestassistancein identifying
if detectedunusual activity
relates to an APTor a crimeware
actor

Submit malware
files forcomprehensive
analysis tounderstand thebehavior andfunctionalityof the provided
sample(s)Extend your knowledge
and resources
Kaspersky Ask the Analyst gives you access to a core group ofKaspersky researchers on a case-by-case basis. The service delivers
comprehensive communication between experts to augment yourexisting capabilities with our unique knowledge and resources.

Learn more

www.kaspersky.com© 2022 AO Kaspersky Lab.
Registered trademarks and service marks
are the property of their respective owners.