Kaspersky Unified Monitoring and Analysis Platform
Contents
Contents
About incidents
If the nature of the data received by KUMA or the generated correlation events and alerts indicate a possible attack or vulnerability, the symptoms of such an occurrence can be combined into an incident. This allows security officers to analyze threat manifestations in a comprehensive manner and facilitates response.
You can assign a category, type, and severity to an incident, and assign incidents to data protection officers for processing.
Incidents can be exported to NCIRCC.
Page top