Interface of Kaspersky Threat Intelligence Portal
This section describes the primary elements of the Kaspersky Threat Intelligence Portal interface (see figure below).
Kaspersky Threat Intelligence Portal interface
The worldwide cybermap shows threats around the globe. The main view highlights 6 continents, showing aggregated threat levels for the selected risk category. Zooming in reveals individual countries as color-coded points, with clustering applied at broader zoom levels. Each cluster indicates the total number of countries it represents. Below the cybermap, top 10 countries with the largest number of threats of selected type and top 10 detected threats are listed.
When you hover your mouse over a specific country point on the cybermap, threat ratings and statistics are displayed. These include ranking in the ‘most frequently attacked countries’ list, and the percentage of user quantity. Clicking a country point takes you to the page displaying data for this country: number of detections and TOP threats.
For both the worldwide and individual country data, filtering by type and time is available.
By selecting the information type in the drop-down list, you can view the information for the following types:
- Ransomware—Shows ransomware-class threats: ransomware or blockers.
- Exploits—Shows statistics on exploits detected by various security components.
- Web threats—Shows statistics on threats detected by the Web Anti-Virus component in Kaspersky products.
- Spam—Shows statistics on countries with the largest amount of e-mail spam originating from these countries, as well as the most frequently triggered spam detection methods and technologies.
- Malicious mail—Shows statistics on threats detected in e-mails.
- Network attacks—Shows statistics on threats detected by the Network Attack Blocker component. Typically, these threats include password crackers , port scanners, exploits for various vulnerabilities and other attacks.
- Local infections—Shows statistics on threats detected on the devices of Kaspersky users.
- On-demand scan—Shows statistics on threats detected by manual on-demand scans run via the Kaspersky product interface.
By selecting the time period in the drop-down list, you also can filter the displayed information for a specific period:
- Day—Cybermap and other threat statistics for the past 24 hours are displayed.
- Week—Cybermap and other threat statistics for the past seven days are displayed.
- Month—Cybermap and other threat statistics for the past month are displayed.
You can also zoom in on the cybermap by scrolling the map area. Clicking the house button (
) returns the cybermap zoom to 100%.
The left part of the Kaspersky Threat Intelligence Portal page contains a menu to access the main functions of the portal.
This menu consists of two sections—click the Right Arrow (
) to expand or Left Arrow (
) to collapse each section at any time to view the menu in more detail.
Main menu
The main menu provides access to the following sections:
- Analysis (
). In this section, you can:- On the File Analysis tab—Submit files to be executed in an isolated environment.
- On the Lookup tab—Request the lookup data for hashes, IP addresses, domains, and web addresses.
- On the Web Address Analysis tab—Register with Kaspersky Threat Intelligence Portal (General Access) to get access to the web address analysis feature.
- Requests (
). In this section, you can:- On the Public requests tab—View a list of lookup requests made by other users (public requests).
- On the My requests tab—View a list of your search results, including lookup requests, file and web address analysis requests, and requests made using the Kaspersky Threat Intelligence Portal API. This tab is available only for registered users.
- Premium Services (
). In this section, you can view a description of the premium services offered by Kaspersky Threat Intelligence Portal. - About Portal (
). In this section, you can view general information about Kaspersky Threat Intelligence Portal features. - Select theme (
). Lets you choose a dark or light background web interface. - Select language (
). Lets you select the localization language for the Kaspersky Threat Intelligence Portal interface. It is available in English and Russian. - Help (
). Takes you to Kaspersky Threat Intelligence Portal Help. - Send feedback (
). Takes you to a page where you can send comments and suggestions about our services and website to the Kaspersky Threat Intelligence Portal team. - Sign in (
). Lets you sign in with Kaspersky Account (General Access). Here, you can also view the Terms of Use and Privacy Statement. Available only if you are not signed in to Kaspersky Threat Intelligence Portal. - Sign in to premium version (). Lets you sign in with a Kaspersky Threat Intelligence Portal account (Premium Access). Available only if you are not signed in to Kaspersky Threat Intelligence Portal.
Account menu
You can access this menu by clicking your user name in the lower-left corner of the page.
The account menu is only available if you have signed in with your Kaspersky account. Through this menu, you can do the following:
- Change credentials. Takes you to a page where you can change your Kaspersky Account password and email address. Also, you can enable two-step verification.
- Request token. Takes you to a page where you can request an API token, which is required for working with Kaspersky Threat Intelligence Portal API.
- Sign out. Signs you out of Kaspersky Threat Intelligence Portal. Available only if you are signed in to Kaspersky Threat Intelligence Portal.
- Terms of Use. Takes you to the Terms of Use for the Kaspersky Threat Intelligence Portal page. Available only if you are signed in to Kaspersky Threat Intelligence Portal.
- Privacy Statement. Takes you to the Data Privacy Statement Kaspersky Threat Intelligence Portal page. Available only if you are signed in to Kaspersky Threat Intelligence Portal.