Kaspersky has expanded its Managed Detection and Response (MDR) service with Digital Footprint Intelligence. The MDR environment now links leaked-credential data to security events in real time. Additionally, the update includes notifications on the status of protected assets and support for Kaspersky Embedded Systems Security for Linux 4.0.
The update focuses primarily on one issue: attackers who log in in a seemingly normal way rather than breaking in. According to Kaspersky research, the misuse of valid accounts accounts for 25 percent of all initial attack vectors. After all, someone using a stolen or leaked password is less likely to attract attention than someone exploiting a vulnerability.
With the integration of Digital Footprint Intelligence (DFI), the platform automatically correlates intelligence about leaked credentials with security events. This allows analysts to detect potential account compromises earlier, prioritize incidents more effectively, and conduct more targeted threat hunting.
Greater visibility into your own environment
In addition, Kaspersky is introducing Asset Status Notifications. These alert administrators as soon as a protected asset needs attention, such as when telemetry collection or connectivity issues occur. The idea is to make blind spots in monitoring visible before they cause damage.
Administrators can also set an expected number of hosts per tenant. This is particularly useful for service providers, as it helps them better manage license distribution across their customer base. Platform coverage continues to expand with support for Kaspersky Embedded Systems Security for Linux 4.0, which extends MDR protection to Linux-based embedded environments. The rest of the release consists of minor usability and platform improvements.
“The integration of Digital Footprint Intelligence adds another important layer of context for our analysts by enabling them to correlate compromised credential intelligence with security events and proactively search for signs of account compromise,” said Renat Turianov, MDR Product Owner at Kaspersky.
Kaspersky MDR provides 24/7 monitoring, detection, investigation, and response, and is aimed at organizations that cannot run their own round-the-clock security monitoring.