ArcSight Marketplace | Micro Focus

FREE

Community

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

742

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

1,519

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,545

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,289

Micro Focus COMMUNITY

Common Event Format Guide

Micro Focus

Standardize event data at the source using the Common Event Format, an open log management standard.

407

FREE

Micro Focus COMMUNITY

L2-WannaCry Malware Detection - Situational Awareness

Micro Focus

This package is intended to detect WannaCry malware IOCs incidents and provide ArcSight context to them, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator of potential WannaCry IOCs in critical hosts.

600

FREE

Micro Focus COMMUNITY

Anomalous Traffic Detection

Micro Focus

The Anomalous Traffic Detection use case helps you identify sudden spikes in network traffic so that you can detect potential malicious activity. Sudden spikes in traffic can be caused by scheduled backups or virus scanner updates inside your LAN.

1,000

See all items
$450

Community

Ransomware Hunter

SOC Prime

Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.

FREE

Micro Focus COMMUNITY

L3-Base - Threat and Impact Analysis

Micro Focus

This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.

307

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

306

FREE

Micro Focus COMMUNITY

Activate P-Lenel Onguard2013

Micro Focus

This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.

164

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,886

$1100

Community

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.

FREE

Micro Focus COMMUNITY

Activate P-Websense Security

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.

564

$600

Community

File Hash Analytics

SOC Prime

File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.

FREE

Community

Cofense Triage

Cofense, Inc.

Cofense Triage provides security operations center (SOC) analysts and incident responders insight into ongoing spear phishing attacks by automating the analysis and orchestrating the workflow associated with employee reported suspicious emails.

31

See all items
FREE

Micro Focus COMMUNITY

Activate Base

Micro Focus

ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.

4,943

FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

9,205

FREE

Micro Focus COMMUNITY

L2-Physical Security

Micro Focus

The L2 Physical Security is intended to provide AcrSight context to L1-Physical Security - Indicators and Warnings using some Critical Area information and Deactivated Badge information.

333

FREE

Micro Focus COMMUNITY

L1-Physical Security

Micro Focus

The "L1-Physical Security - Indicators and Warnings" package focuses on swipe card activity, motion, alarm, and camera systems. Defender often install badging, cameras, security guards or other detection techniques for physical security and monitoring.

413

FREE

Community

Delete Multiple Cases

Eli Benitah

A tool that will delete the cases with the ArcSight API the right way, without hurting the job

9

FREE

Community

Interset ESM Integration

Josh Mahonin

ArcSight and Interset empowers a layered analytics approach, providing analytics to solve the right type of use cases, bringing to bear best of breed technologies to optimize security operations and dramatically improve organizations’ security postures.

72

FREE

Micro Focus COMMUNITY

ATAR Labs

Micro Focus

This guide provides information for configuring the ATARLABS- ATAR integration for ArcSight ESM. This integration is supported on ESM versions [6.9.1.2195] and later. ATAR version(s) 2.11 is supported.

12

FREE

Community

CyCraft CyberTotal

CyCraft

CyCraft secures the Fortune 500 via MDR, IR, & TI. Our threat intel service, CyberTotal, merges 20+ major sources, open source & proprietary intel. With this simple integration you can rapidly hunt threats & validate/enrich your artifacts/indicators.

31

FREE

Community

IntSights

IntSights Cyber Intelligence, Inc

Through continuous collection of external threat data extracted across the clear, deep, and dark web, IntSights equips you with the contextualized intelligence and powerful automation you need to detect and neutralize threats outside the wire.

11

FREE

Micro Focus COMMUNITY

Lookout

Micro Focus

This guide provides information for configuring the Lookout SIEM Connector App integration for ArcSight ESM.

7

See all items
FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

275

Partner

ForeScout-ArcSight Joint Integration Solution Brief

ForeScout

Improve real-time visibility over managed and unmanaged devices while automating network access control and threat response.

247

FREE

Community

Activate P-Citrix

Yun Peng

Activate P-Citrix package is designed to handle events generated by Citrix devices. This package supports L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.

40

Micro Focus COMMUNITY

Connector

Micro Focus

ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)

4,901

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,545

FREE

Micro Focus COMMUNITY

P-Microsoft PowerShell

Micro Focus

The P-Microsoft Windows package offers an easy way to monitor events received through PowerShell scripts and commands.

103

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

1,519

Micro Focus COMMUNITY

Management Center (ArcMC)

Micro Focus

Focus on threats, not on tools. ArcSight Management Center (ArcMC) is a centralized security management center that manages large deployments of ArcSight solutions

1,657

FREE

Micro Focus COMMUNITY

L2-Entity Monitoring

Micro Focus

The L2-Entity Monitoring - Situational Awareness package is designed to identify anomalies dealing with account authentication and management.

874

FREE

Micro Focus COMMUNITY

L1-Entity Monitoring

Micro Focus

The L1-Entity Monitoring - Indicators and Warnings package is designed to identify anomalies dealing with account authentication and management.

1,218

See all items
Classic Packages

View 14 items

FalseCONNECT

View 1 item

Partner Integrations

View 90 items

Activate Product Packages

View 45 items

NEW

View 19 items

Resource Center

View 17 items

User Behavior Analytics

View 1 item

FlexConnectors

View 32 items

SmartConnectors

View 1 item

Logger

View 11 items

Activate Packages

View 42 items

Utilities and Tools

View 28 items

Products

View 11 items

News & more

http://www8.hp.com/us/en/software-solutions/arcsight-logger-log-management/try-now.html

ArcSight Investigate

ArcSight Investigate is a next generation hunt and investigation solution built on a new advanced analytics platform to serve the evolving needs of security teams. It helps hunt and defeat unknown threats by processing large volumes of data almost instantly. Security analysts are empowered with an intuitive solution to investigate higher-priority threats quickly and accurately. With the ability to leverage data lakes, ArcSight Investigate provides insights from Big Data to drive real value.

The Next Generation of SOC

Micro Focus introduced the Micro Focus ArcSight Data Platform (ADP 2.0) to lay the foundation for combating the growing security challenges that security operations face in detecting and responding to cyber threats. Micro Focus ADP 2.0 delivers up to 50 percent faster search and provides a centralized Event Broker that ingests 1 million events per second.

Notice: Branded Content

Certain versions of content (“Material”) accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.

Sign in

Welcome to ArcSight Marketplace

Discover the Micro Focus Community

Just launched! All new ArcSight Investigate

Explore the newest Activate Packages!

DNS Security Check

Logger

Enterprise Security Manager (ESM)

Firewall Monitoring

Common Event Format Guide

L2-WannaCry Malware Detection - Situational Awareness

Anomalous Traffic Detection

Ransomware Hunter

L3-Base - Threat and Impact Analysis

Logstash ArcSight Module

Activate P-Lenel Onguard2013

L1-Threat Intelligence – Indicators and Warnings

Web Application Security Framework

Activate P-Websense Security

File Hash Analytics

Cofense Triage

Activate Base

ArcSight SmartConnector Parser Update

L2-Physical Security

L1-Physical Security

Delete Multiple Cases

Interset ESM Integration

ATAR Labs

CyCraft CyberTotal

IntSights

Lookout

ESM Default Content

ForeScout-ArcSight Joint Integration Solution Brief

Activate P-Citrix

Connector

Enterprise Security Manager (ESM)

P-Microsoft PowerShell

Logger

Management Center (ArcMC)

L2-Entity Monitoring

L1-Entity Monitoring

Classic Packages

FalseCONNECT

Partner Integrations

Activate Product Packages

NEW

Resource Center

User Behavior Analytics

FlexConnectors

SmartConnectors

Logger

Activate Packages

Utilities and Tools

Products

News & more

ArcSight Investigate

The Next Generation of SOC

Notice: Branded Content

Want to Contribute to the ArcSight Marketplace?

Sign up now, or contact us for more information.