Get a license with the AI module and activate the functionality in KUMA.
In the KUMA web console, go to the Settings → Integrations → AI services section.
This opens a window; in that window, go to the Kaspersky Investigation & Response Assistant tab.
Enable integration with KIRA by enabling the Status toggle switch.
The toggle switch is turned off by default.
Click Select file and download the <customer name> .ZIP archive, which contains the certificate in PFX format.
In the Certificate password, enter the password.
In the Proxy server drop-down list, select a previously created resource or create a new resource.
In the drop-down list, select the KIRA response language, Russian or English. KUMA sends and stores KIRA responses in the language of your choice.
Russian is selected by default.
Click Save.
After clicking Save, you are prompted to accept the terms and conditions of the End Use License Agreement. If you do not accept the End Use License Agreement, you cannot save the settings or continue to use the functionality.
After saving the settings, the available number of tokens is displayed. The tokens are replenished every day.
Integration is configured, you can proceed to the analysis. Analysis is available for all events: new and previously received.