Kaspersky
Threat Lookup

Kaspersky Threat Lookup
Cybercrime knows no borders, and technical capabilities are
improving fast: we’re seeing attacks becoming increasingly
sophisticated as cybercriminals use dark web resources tothreaten their targets. Cyberthreats are constantly growing infrequency, complexity and obfuscation, as new attempts are madeto compromise your defenses. Attackers are using complicated killchains, and customized Tactics, Techniques and Procedures (TTPs)
in their campaigns to disrupt your business, steal your assets or
damage your clients.
Kaspersky Threat Lookup delivers all the knowledge acquired byKaspersky about cyberthreats and their relationships, brought
together into a single, powerful web service. The goal is to provide
your security teams with as much data as possible, preventing
cyberattacks before they impact your organization. The platform
retrieves the latest detailed threat intelligence about URLs, domains,
IP addresses, file hashes, threat names, statistical/behavior data,
WHOIS/DNS data, file attributes, geolocation data, download chains,timestamps etc. The result is global visibility of new and emerging
threats, helping you secure your organization and boosting incident
response.

Objects
to analyze

Sources
Kaspersky Security
NetworkFiles

CONTEXTUALINTELLIGENCELOOKUP

RAW DATA

URLs

Automated
Correlation
Domains

INCIDENTRESPONSE

HashesSpam traps
Botnet monitoring
Passive DNSWeb ServiceIP addresses

Web crawlers• Is it malicious?
• Are we under threat?
• What is it designed to do?
• What relationships does it have?

Sensors
Security partners

Highlights

Trusted Intelligence: A key attributeof Kaspersky Threat Lookup is thereliability of our threat intelligencedata, enriched with actionable context.
Kaspersky leads the field in anti-malware
tests1, demonstrating the unequalled
quality of our security intelligence bydelivering the highest detection rates,with near-zero false positives

Threat hunting: Be proactive in preventing,detecting and responding to attacks,
to minimize their impact and frequency.
Track and aggressively eliminate attacks
as early as possible. The earlier you candiscover a threat, the less damage iscaused, the faster repairs take place andthe sooner network operations can getback to normal

Incident investigations: A Research
Graph boosts incident investigations
by letting you visually explore data anddetections stored in Threat Lookup. It
provides a graphic visualization of therelationship between URLs, domains, IPs,
files and other contexts so you can better
understand the full scope of an incident
and identify its root cause.

Master search: Search for information
across all active threat intelligenceproducts and external sources (including
OSINT IoCs, Dark Web and Surface Web)in a single and powerful interface.

Easy-to-use Web interface or RESTful API:Use the service in manual mode througha web interface (via a web browser) or
access via a simple RESTful API as youprefer

Wide range of export formats: ExportIOCs (Indicators of Compromise) or
actionable context into widely used andmore organized machine-readable sharing
formats, such as STIX, OpenIOC, JSON,Yara, Snort or even CSV, to reap the full
benefits of threat intelligence, automate
operations workflow, or integrate withsecurity controls such as SIEMs

Diagnose and analyze security incidents
on hosts and the network more efficientlyand effectively, and prioritize signals frominternal systems against unknown threats

Boost your incident response and threat
hunting capabilities to disrupt the killchain before critical systems and data arecompromised

Benefits

Conduct deep searches into threat
indicators with highly-validated threat
context that lets you prioritize attacks andfocus on mitigating the threats that posethe most risk to your business1

kaspersky.com/top3

Now you can

Look up threat indicators froma web-based interface or via
the RESTful API

Understand why an object
should be treated as maliciousExamine advanced details
including certificates,
commonly used names, filepaths, or related URLs todiscover new suspicious
objects

Check whether the discovered
object is widespread or uniqueLearn more

www.kaspersky.com© 2022 AO Kaspersky Lab.
Registered trademarks and service marks
are the property of their respective owners.