{"id":70131,"date":"2025-01-23T13:23:52","date_gmt":"2025-01-23T11:23:52","guid":{"rendered":"https:\/\/gulftech-news.com\/en\/?p=70131"},"modified":"2025-01-23T13:23:53","modified_gmt":"2025-01-23T11:23:53","slug":"extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem","status":"publish","type":"post","link":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/","title":{"rendered":"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM"},"content":{"rendered":"\n

To bolster the productivity and effectiveness of cybersecurity teams, Kaspersky has unveiled a significant update to its Security Information and Event Management (SIEM) solution. The enhanced platform provides a new AI module for faster and more effective alert triage, helps to visualize resource dependencies and enables extended search capabilities.<\/strong><\/p>\n\n\n\n

According to Verified Market Research, the SIEM market was valued<\/a> at $5.21 billion in 2024 and is expected to reach $10.09 billion by 2031. Among the key factors that contribute to such growth are rising cyber threats, regulatory compliance regulations and demand for rapid threat detection. Businesses are searching for solutions that enable them to collect and analyze data in real time, significantly enhancing their situational awareness. <\/p>\n\n\n\n

To meet this demand, Kaspersky added new features to its SIEM, allowing cybersecurity professionals to detect threats more efficiently.<\/p>\n\n\n\n

Kaspersky SIEM is a security operations center (SOC) platform based on an AI-powered technology stack and reinforced by world-leading Threat Intelligence. The platform collects log data and enriches it with contextual information and actionable threat intelligence to provide all the data needed for incident investigation and response, while enabling automated responses to alerts and threat hunting.<\/p>\n\n\n\n

New AI module<\/strong><\/p>\n\n\n\n

Kaspersky SIEM features a new AI module that improves triage alerts and incidents by analyzing historical data, while AI-based risk scoring of assets provides valuable hypotheses for proactive searches.<\/p>\n\n\n\n

This module analyzes how the characteristic of a particular activity is related to different assets – workstations, virtual machines, mobile phones, and so on. <\/p>\n\n\n\n

If an alert detected by the system as a result of event correlation is not typical for the asset on which it is detected, such a detection is marked in the interface with an additional status. Therefore, analysts can quickly see incidents that require immediate attention.<\/p>\n\n\n\n

Data collection by the Kaspersky Endpoint Security agent<\/strong><\/p>\n\n\n\n

Previously, to collect data from workstations running Windows and Linux, it was necessary to install a SIEM agent on each station or configure data transmission to an intermediate host and then configure data exchange with the SIEM. Now, if the Kaspersky Endpoint Security agent is installed on the host, it can directly send data to the SIEM system. <\/p>\n\n\n\n

This data can be used for further event searches, analysis, and correlation. Thus, the additional step of installing and monitoring separate SIEM agents is eliminated for customers who already use Kaspersky products for endpoint security.<\/p>\n\n\n\n

Resource dependencies graph and extended search capabilities<\/strong><\/p>\n\n\n\n

The platform also improved its search capabilities and now allows customers to visualize how resources (filters, rules, lists) are connected with each other. A resource dependencies graph featuring a hierarchical folder structure makes it easier to find the correct search query for large teams or multiple stored searches. <\/p>\n\n\n\n

Analysts can quickly and precisely locate relevant events or create “rolling window” reports by defining the start and finish timeframes for a search query or report. Storing search query history enables the user to access previous inquiries with ease.<\/p>\n\n\n\n

Content versioning<\/strong><\/p>\n\n\n\n

Kaspersky SIEM stores the history of resource changes in the form of versions. A resource version is created automatically when an analyst creates a new resource or saves changes to parameters in an existing resource. Version storage simplifies interaction within analyst teams.<\/p>\n\n\n\n

For example, one team member can see any changes a colleague has made in a correlation rule, and if necessary, undo them.<\/p>\n\n\n\n

Unique field mapping<\/strong><\/p>\n\n\n\n

With the updated platform, analysts can now add an array of specified field values from the correlation rule\u2019s unique field section to a correlation event, thus saving time by eliminating the need to search through field values in underlying events.<\/p>\n\n\n\n

Kaspersky SIEM also enables the addition of specific field values to an exception if an alert is identified as a false positive. Each correlation rule generates a separate exception list, allowing analysts to focus on critical alerts and quickly reduce correlation rule \u2018noise\u2019.<\/p>\n\n\n\n

“As SIEM is one of the main tools for SOC teams and IT security departments, we do everything we can to make our platform easier to use. These new features mean businesses can react to events faster and with less effort. <\/p>\n\n\n\n

Also, we enhanced our Kaspersky SIEM by enriching it with connectors to event sources and correlation rules. Today, our out-of-the-box rules already cover over 400 techniques from the MITRE ATT&CK matrix, and the number of supported sources has reached close to 300. And this number is constantly growing,” comments Ilya Markelov, Head of Unified Platform Product Line at Kaspersky.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

To bolster the productivity and effectiveness of cybersecurity teams, Kaspersky has unveiled a significant update to its Security Information and Event Management (SIEM) solution. The enhanced platform provides a new AI module for faster and more effective alert triage, helps to visualize resource dependencies and enables extended search capabilities. According to Verified Market Research, the …<\/p>\n","protected":false},"author":2,"featured_media":70132,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[644],"tags":[1088],"class_list":["post-70131","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-communications-technology","tag-kaspersky-4"],"yoast_head":"\nExtended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM - Gulf Tech News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM - Gulf Tech News\" \/>\n<meta property=\"og:description\" content=\"To bolster the productivity and effectiveness of cybersecurity teams, Kaspersky has unveiled a significant update to its Security Information and Event Management (SIEM) solution. The enhanced platform provides a new AI module for faster and more effective alert triage, helps to visualize resource dependencies and enables extended search capabilities. According to Verified Market Research, the …\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/\" \/>\n<meta property=\"og:site_name\" content=\"Gulf Tech News\" \/>\n<meta property=\"article:published_time\" content=\"2025-01-23T11:23:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-23T11:23:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"405\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"bessan helmi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"bessan helmi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/\",\"url\":\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/\",\"name\":\"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM - Gulf Tech News\",\"isPartOf\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411\",\"datePublished\":\"2025-01-23T11:23:52+00:00\",\"dateModified\":\"2025-01-23T11:23:53+00:00\",\"author\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c\"},\"breadcrumb\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#primaryimage\",\"url\":\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411\",\"contentUrl\":\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411\",\"width\":780,\"height\":405,\"caption\":\"Valid accounts showed significant increase as initial attack vector in 2024\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/gulftech-news.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/gulftech-news.com\/en\/#website\",\"url\":\"https:\/\/gulftech-news.com\/en\/\",\"name\":\"Gulf Tech News\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/gulftech-news.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c\",\"name\":\"bessan helmi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g\",\"caption\":\"bessan helmi\"},\"url\":\"https:\/\/gulftech-news.com\/en\/author\/bessan-helmi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM - Gulf Tech News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/","og_locale":"en_US","og_type":"article","og_title":"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM - Gulf Tech News","og_description":"To bolster the productivity and effectiveness of cybersecurity teams, Kaspersky has unveiled a significant update to its Security Information and Event Management (SIEM) solution. The enhanced platform provides a new AI module for faster and more effective alert triage, helps to visualize resource dependencies and enables extended search capabilities. According to Verified Market Research, the …","og_url":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/","og_site_name":"Gulf Tech News","article_published_time":"2025-01-23T11:23:52+00:00","article_modified_time":"2025-01-23T11:23:53+00:00","og_image":[{"width":780,"height":405,"url":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411","type":"image\/png"}],"author":"bessan helmi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"bessan helmi","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/","url":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/","name":"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM - Gulf Tech News","isPartOf":{"@id":"https:\/\/gulftech-news.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#primaryimage"},"image":{"@id":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#primaryimage"},"thumbnailUrl":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411","datePublished":"2025-01-23T11:23:52+00:00","dateModified":"2025-01-23T11:23:53+00:00","author":{"@id":"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c"},"breadcrumb":{"@id":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#primaryimage","url":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411","contentUrl":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/01\/Kaspersky-New-Logo-2.png?v=1737631411","width":780,"height":405,"caption":"Valid accounts showed significant increase as initial attack vector in 2024"},{"@type":"BreadcrumbList","@id":"https:\/\/gulftech-news.com\/en\/2025\/01\/23\/extended-ai-capabilities-and-resource-visualization-great-new-features-provided-by-kaspersky-siem\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gulftech-news.com\/en\/"},{"@type":"ListItem","position":2,"name":"Extended AI capabilities and resource visualization: great new features provided by Kaspersky SIEM"}]},{"@type":"WebSite","@id":"https:\/\/gulftech-news.com\/en\/#website","url":"https:\/\/gulftech-news.com\/en\/","name":"Gulf Tech News","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gulftech-news.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c","name":"bessan helmi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g","caption":"bessan helmi"},"url":"https:\/\/gulftech-news.com\/en\/author\/bessan-helmi\/"}]}},"_links":{"self":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts\/70131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/comments?post=70131"}],"version-history":[{"count":1,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts\/70131\/revisions"}],"predecessor-version":[{"id":70133,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts\/70131\/revisions\/70133"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/media\/70132"}],"wp:attachment":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/media?parent=70131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/categories?post=70131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/tags?post=70131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}