When using Kaspersky Threat Intelligence Portal, in addition to the data that you provide in accordance with the Terms and Conditions, the following types of data are automatically obtained and processed for the purposes described below.
Kaspersky protects any information received in accordance with law and applicable Kaspersky rules. Data is transmitted over a secure channel.
All obtained data is stored during the license term. When a storage period expires, the data is deleted from online transaction processing (OLTP) databases.
You can withdraw your consent to the provision of the data described below at any time.
To withdraw your consent, contact your dedicated Kaspersky Technical Account Manager by ktlsupport@kaspersky.com.
Processed data:
General user actions
For detection services improvement and processing user requests to Kaspersky Threat Intelligence Portal services in accordance with license terms, on any user action during work with Kaspersky Threat Intelligence Portal, the portal obtains the following data according to the Terms and Conditions:
Terms and Conditions confirmation
For processing user requests to Kaspersky Threat Intelligence Portal services in accordance with license terms, the portal obtains the following data:
Statement About Data Provision confirmation
For processing user requests to Kaspersky Threat Intelligence Portal services in accordance with license terms, the portal obtains the following data:
Signing in to Kaspersky Threat Intelligence Portal
For purposes of user authentication and verification of compliance with the current license, on signing in to Kaspersky Threat Intelligence Portal, the portal obtains the following data according to the Terms and Conditions:
APT Intelligence Reporting, Crimeware Threat Intelligence Reporting, and Industrial Threat Intelligence Reporting services
For purposes of generating user input hints and searching for requested text (full text search), the requests to the Reporting service are received, stored, and processed in accordance with the Terms and Conditions.
Threat lookup service
For purposes of searching requested objects, display of recent user requests, and verification of compliance with the current license, when the Threat lookup service is used, Kaspersky Threat Intelligence Portal obtains the following data:
Dark web and Surface web search
For purposes of investigating issues, verifying compliance with the current license, and notifying the user, when the WHOIS hunting functionality is used in the Kaspersky Dark web and Surface web search, the following information are processed:
WHOIS hunting service
For purposes of issue investigations, verification of compliance with the current license, and user notification, when the WHOIS hunting service is used, Kaspersky Threat Intelligence Portal obtains the following data according to the Terms and Conditions:
WHOIS lookup service
For purposes of issue investigations, display of user recent requests, and verification of compliance with the current license, when the WHOIS lookup service is used, Kaspersky Threat Intelligence Portal obtains the following data:
Kaspersky Sandbox: Uploaded or downloaded files execution
For purposes of issue investigations, display of recent user requests, and verification of compliance with the current license, when executing a file in Kaspersky Sandbox, Kaspersky Threat Intelligence Portal obtains the following data:
Cloud Threat Attribution Engine
For purposes of investigating issues, verifying compliance with the current license, and notifying the user about a file analysis results that extracted with Cloud Threat Attribution Engine, the information from the file are processed.
Kaspersky Sandbox: Browse URL
For purposes of issue investigations, display of recent user requests, and verification of compliance with the current license, when analyzing a web address in Kaspersky Sandbox, Kaspersky Threat Intelligence Portal obtains the following data:
Account management
For the purpose of verification of compliance with the current license, when a new account is created, Kaspersky Threat Intelligence Portal obtains the following data according to the Terms and Conditions:
Digital Footprint Intelligence service
For the purpose of detecting immediate threats to the organization and provide the user with information about them, to perform text searches from the user and to filter those results, Kaspersky Threat Intelligence Portal receives the following data when you use the Digital Footprint Intelligence service: