Kaspersky Anti Targeted Attack Platform

Creating and using connectors for Kaspersky Anti Targeted Attack Platform API

To enable interaction between an external system and Kaspersky Anti Targeted Attack Platform API, you need to add a connector for that system. When creating a connector, you must indicate the Generic system type for the connector.

When adding a connector and when creating a new communication data package for this connector, the Central Node generates a communication data package that you need to use for the connector to work.

A communication data package is an archive containing the following files:

• The certificates.pfx file contains the encrypted public key of the Central Node certificate and the certificate issued by the Central Node for the connector (with the private key). The contents of the file are encrypted with the password that was set when the connector was added or when a new communication data package was created for this connector.
• The metadata.json file contains the configuration data for the connector. Data is represented in JSON format.

The listed files must be used to connect the external system through the connector. To decrypt the certificates.pfx file and apply the certificate and keys that it contains, you can use the standard methods for handling files of this format (for example, openssl commands). The addresses specified in the metadata.json file are required for the connector to work and for sending requests to the REST API server.

The certificate and configuration data in the communication data package are valid until a new communication data package is created or until the connector is removed from the application.