AnalysisPublished 31 Jan 2026

Kaspersky SIEM 4.2 update — what’s new? | Kaspersky official blog

Source Kaspersky Security Blog

Description

Kaspersky Unified Monitoring and Analysis Platform, version 4.2: detecting compromised accounts using AI, updated correlator, and other innovations.

Impact

For European organizations, the enhanced detection capabilities of Kaspersky SIEM 4.2 can significantly improve early identification of credential-based attacks, which are a common initial vector for breaches. This is particularly important given the widespread use of remote access and the prevalence of phishing and credential theft in Europe. The AI-driven behavioral analytics reduce false positives, enabling SOC teams to focus on genuine threats and respond more effectively. Improved role-based access control helps mitigate insider threats and limits the risk of privilege abuse within security operations. The new correlator engine's efficiency supports large-scale deployments common in European enterprises without requiring immediate costly infrastructure upgrades. Compliance-related features such as event backup with integrity control assist organizations in meeting stringent European data protection and audit requirements (e.g., GDPR). Overall, the update strengthens the resilience of European organizations against increasingly sophisticated attacks targeting user credentials, thereby protecting sensitive data, maintaining service availability, and preserving organizational reputation.

Defensive guidance

European organizations using Kaspersky SIEM should promptly upgrade to version 4.2 to leverage AI-driven behavioral detection and improved correlator performance. They should customize the flexible role-based access control to enforce the principle of least privilege within their SOC teams, reducing insider risk. Organizations must integrate the new UEBA rules and specialized correlator rule into their detection workflows to maximize early identification of account compromise. Regularly update detection rules aligned with the MITRE ATT&CK framework to cover emerging tactics and techniques. Utilize the event backup and restore features to maintain forensic readiness and support compliance audits. Conduct training for SOC analysts on interpreting AI-driven alerts to reduce false positives and improve incident response efficiency. Additionally, organizations should continue enforcing strong multi-factor authentication, employee security awareness, and credential hygiene practices to complement SIEM detection capabilities. Finally, monitor Kaspersky’s official channels for ongoing updates and threat intelligence to adapt defenses proactively.

References

kaspersky.com/blog/kaspersky-siem-4-2-update/55214/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 31 Jan 2026, 10:29 UTC

References

Community reviews