ArcSight Marketplace | Micro Focus

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,339

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,705

FREE

Community

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

793

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

1,610

Micro Focus COMMUNITY

Common Event Format Guide

Micro Focus

Standardize event data at the source using the Common Event Format, an open log management standard.

425

FREE

Micro Focus COMMUNITY

L2-WannaCry Malware Detection - Situational Awareness

Micro Focus

This package is intended to detect WannaCry malware IOCs incidents and provide ArcSight context to them, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator of potential WannaCry IOCs in critical hosts.

611

FREE

Micro Focus COMMUNITY

Anomalous Traffic Detection

Micro Focus

The Anomalous Traffic Detection use case helps you identify sudden spikes in network traffic so that you can detect potential malicious activity. Sudden spikes in traffic can be caused by scheduled backups or virus scanner updates inside your LAN.

1,042

See all items
FREE

Micro Focus COMMUNITY

Activate P-Lenel Onguard2013

Micro Focus

This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.

167

$450

Community

Ransomware Hunter

SOC Prime

Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

323

FREE

Micro Focus COMMUNITY

L3-Base - Threat and Impact Analysis

Micro Focus

This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.

328

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

917

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,957

$1100

Community

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.

FREE

Micro Focus COMMUNITY

Activate P-Websense Security

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.

574

$600

Community

File Hash Analytics

SOC Prime

File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.

FREE

Community

Cofense Triage

Cofense, Inc.

Cofense Triage provides security operations center (SOC) analysts and incident responders insight into ongoing spear phishing attacks by automating the analysis and orchestrating the workflow associated with employee reported suspicious emails.

37

See all items
FREE

Community

Covid-19-related Malicious Monitoring

Yun Peng

This package detects coronavirus related malicious attacks,

256

FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

9,717

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

917

FREE

Community

IntSights

IntSights Cyber Intelligence, Inc

Through continuous collection of external threat data extracted across the clear, deep, and dark web, IntSights equips you with the contextualized intelligence and powerful automation you need to detect and neutralize threats outside the wire.

31

FREE

Community

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

710

FREE

Community

COVID-19 Malicious Activity Monitoring

Sliman Mansour

The COVID-19 Malicious Activity is an ArcSight Logger content package to monitor COVID-19 malicious domains and IP addresses reported by ScanTitan's thread feed.

27

FREE

Community

Seclytics Augur

Seclytics Inc.

Seclytics Augur is the first and only Predictive Threat Intelligence Platform (TIP). While other TIPs identify and alert, Augur raises the bar by predicting attacks and adjusting your security posture to block threats before they get to your network.

9

FREE

Community

COVID-19 Global Pandemic

Bart Otten

This page is a collection of resources to identify malicious cyber activities related to COVID-19 global pandemic.

71

FREE

Partner

Cisco Firepower

Cisco

Cisco Firepower Management Center Integration with ArcSight

98

FREE

Micro Focus COMMUNITY

Activate P-Linux

Micro Focus

The P-Linux package contains resources that support L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.

1,052

See all items
FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

9,717

FREE

Community

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

710

FREE

Community

Interset ESM Integration

Josh Mahonin

ArcSight and Interset empowers a layered analytics approach, providing analytics to solve the right type of use cases, bringing to bear best of breed technologies to optimize security operations and dramatically improve organizations’ security postures.

162

Micro Focus COMMUNITY

Connector

Micro Focus

ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)

5,200

Micro Focus COMMUNITY

Management Center (ArcMC)

Micro Focus

Focus on threats, not on tools. ArcSight Management Center (ArcMC) is a centralized security management center that manages large deployments of ArcSight solutions

1,725

FREE

Micro Focus COMMUNITY

VPN Monitoring Package

Micro Focus

The VPN Monitoring use case has been updated to address a performance issue.

1,039

Community

Aruba ClearPass Policy Manager

Aruba Networks

ClearPass solves today’s digital workplace security challenges across any multivendor network by replacing outdated legacy AAA with context-aware policies. It delivers visibility, policy control and workflow automation in one cohesive solution.

158

FREE

Micro Focus COMMUNITY

Tor Activity

Micro Focus

The Monitoring Tor Activity Content Package is a solution which leverages the power of ArcSight Logger to monitor Tor activity across your organization.

641

FREE

Micro Focus COMMUNITY

Brute Force Attack

Micro Focus

The Brute Force Attack use case uncovers and tracks, in real time, attempts and confirmed attacks using a brute force technique on network assets and applications.

1,429

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,339

See all items
FlexConnectors

View 32 items

Activate Product Packages

View 45 items

User Behavior Analytics

View 1 item

Resource Center

View 16 items

Utilities and Tools

View 29 items

Partner Integrations

View 93 items

Products

View 10 items

Logger

View 13 items

SmartConnectors

View 1 item

FalseCONNECT

View 1 item

Classic Packages

View 14 items

NEW

View 20 items

Activate Packages

View 42 items

News & more

http://www8.hp.com/us/en/software-solutions/arcsight-logger-log-management/try-now.html

ArcSight Investigate

ArcSight Investigate is a next generation hunt and investigation solution built on a new advanced analytics platform to serve the evolving needs of security teams. It helps hunt and defeat unknown threats by processing large volumes of data almost instantly. Security analysts are empowered with an intuitive solution to investigate higher-priority threats quickly and accurately. With the ability to leverage data lakes, ArcSight Investigate provides insights from Big Data to drive real value.

The Next Generation of SOC

Micro Focus introduced the Micro Focus ArcSight Data Platform (ADP 2.0) to lay the foundation for combating the growing security challenges that security operations face in detecting and responding to cyber threats. Micro Focus ADP 2.0 delivers up to 50 percent faster search and provides a centralized Event Broker that ingests 1 million events per second.

Notice: Branded Content

Certain versions of content (“Material”) accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.

Sign in

Welcome to ArcSight Marketplace

Discover the Micro Focus Community

Just launched! All new ArcSight Investigate

Explore the newest Activate Packages!

Firewall Monitoring

Enterprise Security Manager (ESM)

DNS Security Check

Logger

Common Event Format Guide

L2-WannaCry Malware Detection - Situational Awareness

Anomalous Traffic Detection

Activate P-Lenel Onguard2013

Ransomware Hunter

Logstash ArcSight Module

L3-Base - Threat and Impact Analysis

ESM Default Content

L1-Threat Intelligence – Indicators and Warnings

Web Application Security Framework

Activate P-Websense Security

File Hash Analytics

Cofense Triage

Covid-19-related Malicious Monitoring

ArcSight SmartConnector Parser Update

ESM Default Content

IntSights

Palo Alto Networks Next-Generation Firewalls

COVID-19 Malicious Activity Monitoring

Seclytics Augur

COVID-19 Global Pandemic

Cisco Firepower

Activate P-Linux

ArcSight SmartConnector Parser Update

Palo Alto Networks Next-Generation Firewalls

Interset ESM Integration

Connector

Management Center (ArcMC)

VPN Monitoring Package

Aruba ClearPass Policy Manager

Tor Activity

Brute Force Attack

Firewall Monitoring

FlexConnectors

Activate Product Packages

User Behavior Analytics

Resource Center

Utilities and Tools

Partner Integrations

Products

Logger

SmartConnectors

FalseCONNECT

Classic Packages

NEW

Activate Packages

News & more

ArcSight Investigate

The Next Generation of SOC

Notice: Branded Content

Want to Contribute to the ArcSight Marketplace?

Sign up now, or contact us for more information.