Kaspersky Data Streams provides continuously updated threat intelligence data delivered via secure HTTPS protocol. The service is designed as a replacement for SafeStream/SafeStream2, offering technology partners a method to feed their hardware and software network security appliances with indicators from Kaspersky. The service includes three distinct data streams: Malicious Hash Data Stream contains approximately 4 million records of malicious file hashes (MD5, SHA1, SHA256) with associated metadata including popularity, threat classification, and file type. The data is delivered as a tab-delimited CSV file, updated hourly, with a compressed size of approximately 400MB. Malicious URL Data Stream provides around 3.4 million records of malicious URLs, delivered as a space-delimited CSV file with mask type, ID, and mask fields. Updates occur every 20 minutes with a compressed size of approximately 50MB. Phishing URL Data Stream contains approximately 1.8 million phishing URLs in a similar format to the malicious URL stream, with 20-minute update intervals and a compressed size of around 100MB. The data streams contain more indicators but less contextual information compared to Kaspersky's Threat Intelligence Data Feeds. Text-based data streams are not subject to U.S. or regional sanctions. Enterprise customer usage can be discussed on a case-by-case basis.