Kaspersky Network Security Threat Data Feeds provide regularly updated indicators of compromise that organizations can import into next-generation firewalls to strengthen network-level protection without redesigning existing topology. Feeds include IP addresses and domains associated with malware distribution, botnet command-and-control infrastructure, phishing, and other dangerous resources. Data is aggregated from sources including Kaspersky Security Network, web crawlers, botnet monitoring, host and IP intelligence, and other sources, then refined using sandboxes, heuristics, behavioral profiling, statistical analysis, analyst validation, and allowlisting. The service supports Cisco, FortiGate, Palo Alto, Check Point, and compatible third-party NGFWs and is designed to automate blocking

Join for free to read