ArcSight Marketplace | Micro Focus

FREE

Community

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

764

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,314

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,615

Micro Focus COMMUNITY

Common Event Format Guide

Micro Focus

Standardize event data at the source using the Common Event Format, an open log management standard.

411

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

1,541

FREE

Micro Focus COMMUNITY

L2-WannaCry Malware Detection - Situational Awareness

Micro Focus

This package is intended to detect WannaCry malware IOCs incidents and provide ArcSight context to them, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator of potential WannaCry IOCs in critical hosts.

606

FREE

Micro Focus COMMUNITY

Anomalous Traffic Detection

Micro Focus

The Anomalous Traffic Detection use case helps you identify sudden spikes in network traffic so that you can detect potential malicious activity. Sudden spikes in traffic can be caused by scheduled backups or virus scanner updates inside your LAN.

1,020

See all items
FREE

Micro Focus COMMUNITY

Activate P-Lenel Onguard2013

Micro Focus

This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.

164

$450

Community

Ransomware Hunter

SOC Prime

Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

312

FREE

Micro Focus COMMUNITY

L3-Base - Threat and Impact Analysis

Micro Focus

This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.

314

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

433

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,907

$1100

Community

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.

FREE

Micro Focus COMMUNITY

Activate P-Websense Security

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.

566

$600

Community

File Hash Analytics

SOC Prime

File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.

FREE

Community

Cofense Triage

Cofense, Inc.

Cofense Triage provides security operations center (SOC) analysts and incident responders insight into ongoing spear phishing attacks by automating the analysis and orchestrating the workflow associated with employee reported suspicious emails.

32

See all items
FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

9,389

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

433

Community

Illumio Adaptive Security Platform (ASP)

Illumio

The Illumio Adaptive Security Platform visualizes application traffic and delivers continuous, scalable, and dynamic security policy and enforcement to every bare-metal server, VM, container, and VDI within data centers and public clouds.

46

FREE

Community

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

604

FREE

Community

Customizing Rules to Work with ArcSight MITRE Package

Sliman Mansour

How To Customize Your Rules so that it works with ArcSight MITRE ATT&CK content

116

FREE

Micro Focus COMMUNITY

Activate Base

Micro Focus

ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.

4,997

FREE

Micro Focus COMMUNITY

L2-Physical Security

Micro Focus

The L2 Physical Security is intended to provide AcrSight context to L1-Physical Security - Indicators and Warnings using some Critical Area information and Deactivated Badge information.

337

FREE

Micro Focus COMMUNITY

L1-Physical Security

Micro Focus

The "L1-Physical Security - Indicators and Warnings" package focuses on swipe card activity, motion, alarm, and camera systems. Defender often install badging, cameras, security guards or other detection techniques for physical security and monitoring.

419

FREE

Community

Delete Multiple Cases

Eli Benitah

A tool that will delete the cases with the ArcSight API the right way, without hurting the job

14

FREE

Community

Interset ESM Integration

Josh Mahonin

ArcSight and Interset empowers a layered analytics approach, providing analytics to solve the right type of use cases, bringing to bear best of breed technologies to optimize security operations and dramatically improve organizations’ security postures.

109

See all items
FREE

Micro Focus COMMUNITY

Activate P-Blue Coat Proxy

Micro Focus

Product package covering proxy traffic events from Blue Coat.

785

FREE

Micro Focus COMMUNITY

Activate Base

Micro Focus

ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.

4,997

FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

9,389

FREE

Micro Focus COMMUNITY

Qualys

Micro Focus

QualysGuard provides a continuous, always-on assessment of global security and compliance posture.

160

FREE

Micro Focus COMMUNITY

Activate C-Security System Monitoring - Appliance

Micro Focus

Activate C-Security System Monitoring - Appliance Keeps track of all appliance errors. Keeps track of storage group sizes.

633

Micro Focus COMMUNITY

Connector

Micro Focus

ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)

4,982

FREE

Community

Microsoft Sysmon FlexConnector

Kevin Q

FlexConnector for the extraction and categorisation of the “Microsoft-Windows-Sysmon/Operational” Windows Event Log using Microfocus ArcSight Windows Native SmartConnector Updated for Sysmon V 10.x

728

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

433

Micro Focus COMMUNITY

Management Center (ArcMC)

Micro Focus

Focus on threats, not on tools. ArcSight Management Center (ArcMC) is a centralized security management center that manages large deployments of ArcSight solutions

1,677

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,615

See all items
Activate Packages

View 42 items

FlexConnectors

View 32 items

NEW

View 19 items

FalseCONNECT

View 1 item

Partner Integrations

View 90 items

Products

View 11 items

Classic Packages

View 14 items

Activate Product Packages

View 45 items

Logger

View 11 items

Utilities and Tools

View 28 items

User Behavior Analytics

View 1 item

Resource Center

View 18 items

SmartConnectors

View 1 item

News & more

http://www8.hp.com/us/en/software-solutions/arcsight-logger-log-management/try-now.html

ArcSight Investigate

ArcSight Investigate is a next generation hunt and investigation solution built on a new advanced analytics platform to serve the evolving needs of security teams. It helps hunt and defeat unknown threats by processing large volumes of data almost instantly. Security analysts are empowered with an intuitive solution to investigate higher-priority threats quickly and accurately. With the ability to leverage data lakes, ArcSight Investigate provides insights from Big Data to drive real value.

The Next Generation of SOC

Micro Focus introduced the Micro Focus ArcSight Data Platform (ADP 2.0) to lay the foundation for combating the growing security challenges that security operations face in detecting and responding to cyber threats. Micro Focus ADP 2.0 delivers up to 50 percent faster search and provides a centralized Event Broker that ingests 1 million events per second.

Notice: Branded Content

Certain versions of content (“Material”) accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.

Sign in

Welcome to ArcSight Marketplace

Discover the Micro Focus Community

Just launched! All new ArcSight Investigate

Explore the newest Activate Packages!

DNS Security Check

Firewall Monitoring

Enterprise Security Manager (ESM)

Common Event Format Guide

Logger

L2-WannaCry Malware Detection - Situational Awareness

Anomalous Traffic Detection

Activate P-Lenel Onguard2013

Ransomware Hunter

Logstash ArcSight Module

L3-Base - Threat and Impact Analysis

ESM Default Content

L1-Threat Intelligence – Indicators and Warnings

Web Application Security Framework

Activate P-Websense Security

File Hash Analytics

Cofense Triage

ArcSight SmartConnector Parser Update

ESM Default Content

Illumio Adaptive Security Platform (ASP)

Palo Alto Networks Next-Generation Firewalls

Customizing Rules to Work with ArcSight MITRE Package

Activate Base

L2-Physical Security

L1-Physical Security

Delete Multiple Cases

Interset ESM Integration

Activate P-Blue Coat Proxy

Activate Base

ArcSight SmartConnector Parser Update

Qualys

Activate C-Security System Monitoring - Appliance

Connector

Microsoft Sysmon FlexConnector

ESM Default Content

Management Center (ArcMC)

Enterprise Security Manager (ESM)

Activate Packages

FlexConnectors

NEW

FalseCONNECT

Partner Integrations

Products

Classic Packages

Activate Product Packages

Logger

Utilities and Tools

User Behavior Analytics

Resource Center

SmartConnectors

News & more

ArcSight Investigate

The Next Generation of SOC

Notice: Branded Content

Want to Contribute to the ArcSight Marketplace?

Sign up now, or contact us for more information.