Kaspersky KUMA

Kaspersky Releases KUMA 4.6 with Knowledge Base, External LLM Support and Automated Regex Generation

Kaspersky has launched version 4.6 of its Unified Monitoring and Analysis Platform, introducing a redesigned knowledge base for delivering normalizers, correlation rules and other SIEM content. The update enables integration of external large language models compatible with the OpenAI API, including GPT-4, Llama 3 and GLM-5.2, which can be deployed either in the cloud or on-premises to keep sensitive data inside the customer infrastructure. The Kaspersky Investigation & Response Assistant now automatically generates regular expressions by analyzing provided log samples, reducing manual work for security analysts. Additional connectivity options include SFTP and SMB for file-based data sources as well as ODBC drivers for direct database connections. The release also adds a long-requested dark theme to the user interface, improving usability during extended incident investigations. These enhancements aim to accelerate response to new threats by delivering ready-made detection packages more rapidly than before.