ArcSight Marketplace | Micro Focus

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,838

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,371

FREE

Community

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

815

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

339

Community

InQuest

InQuest

The InQuest Platform focuses on capturing, identifying, processing, inspecting and storing network content to detect and/or prevent malicious logic and/or sensitive information in-transit.

8

Community

SecurityBridge for SAP

ABAP-Experts - NCMI GmbH

SAP® is still a blind spot for the security monitoring teams in many organizations. SecurityBridge gives insight into suspicious activities occurring across your organization’s entire SAP landscape, enabling you to easily integrate SAP with HP ArcSight!

61

FREE

Micro Focus COMMUNITY

IPv4 Internet Dark Zones Update

Micro Focus

The Zone Update package provides periodic updates to IPv4 address allocations and dark space information for ESM.

1,103

FREE

Micro Focus COMMUNITY

ATAR Labs

Micro Focus

This guide provides information for configuring the ATARLABS- ATAR integration for ArcSight ESM. This integration is supported on ESM versions [6.9.1.2195] and later. ATAR version(s) 2.11 is supported.

33

FREE

Micro Focus COMMUNITY

Activate P-Cisco ASA

Micro Focus

This product-specific package includes the resources that support the Perimeter, Network, Host and Entity Monitoring use case categories.

1,159

Micro Focus COMMUNITY

Common Event Format Guide

Micro Focus

Standardize event data at the source using the Common Event Format, an open log management standard.

447

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

1,649

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

1,462

FREE

Micro Focus COMMUNITY

MSSP Usage Report

Micro Focus

The MSSP Usage Report package provides customer's Average Events Per Second (EPS) usage.

367

Micro Focus COMMUNITY

ApplicationView

Micro Focus

The best place to detect, understand, and mitigate threats to applications lies in the software itself. That’s the focus of ArcSight Application View.

242

FREE

Micro Focus COMMUNITY

Anomalous Traffic Detection

Micro Focus

The Anomalous Traffic Detection use case helps you identify sudden spikes in network traffic so that you can detect potential malicious activity. Sudden spikes in traffic can be caused by scheduled backups or virus scanner updates inside your LAN.

1,074

FREE

Micro Focus COMMUNITY

L2-WannaCry Malware Detection - Situational Awareness

Micro Focus

This package is intended to detect WannaCry malware IOCs incidents and provide ArcSight context to them, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator of potential WannaCry IOCs in critical hosts.

619
FREE

Micro Focus COMMUNITY

Activate P-Lenel Onguard2013

Micro Focus

This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.

170

$450

Community

Ransomware Hunter

SOC Prime

Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

339

FREE

Micro Focus COMMUNITY

L3-Base - Threat and Impact Analysis

Micro Focus

This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.

344

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

1,462

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,990

$1100

Community

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.

FREE

Micro Focus COMMUNITY

Activate P-Websense Security

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.

582

$600

Community

File Hash Analytics

SOC Prime

File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.

FREE

Community

Cofense Triage

Cofense, Inc.

Cofense Triage provides security operations center (SOC) analysts and incident responders insight into ongoing spear phishing attacks by automating the analysis and orchestrating the workflow associated with employee reported suspicious emails.

38
FREE

Micro Focus COMMUNITY

Illusive Network

Micro Focus

This guide provides information for configuring the Illusive Networks integration for ArcSight ESM. This integration is supported on ESM versions [7.0] and later. Illusive version(s) 3.1 and above is supported.

4

FREE

Community

Malware Beaconing Detection

Sliman Mansour

The Malware Beaconing Package is a small package which leverages ArcSight Logger machine learning component to hunt malware beaconing activity in your organization.

57

Partner

FortiSOAR

Fortinet, Inc.

Fortinet FortiSOAR™ is a market leading SOAR platform. FortiSOAR™ in conjunction with Micro Focus ArcSight ESM, provides users with the ability to triage, investigate, and mitigate threats reported by ArcSight ESM.

20

FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

10,135

FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

1,462

FREE

Partner

Sattrix

SATTRIX

Leveraging ArcSight Integration Commands & automated rule-based actions, NextEra SOAR helps to achieve complete Integration With ArcSight ESM including Enrichment, Validation and Remediation of incidents from single Console.

20
FREE

Community

ESM Default Content

Yun Peng

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT&CK framework.

1,462

FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

10,135

Micro Focus COMMUNITY

Connector

Micro Focus

ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)

5,569

FREE

Community

Malware Beaconing Detection

Sliman Mansour

The Malware Beaconing Package is a small package which leverages ArcSight Logger machine learning component to hunt malware beaconing activity in your organization.

57

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,838

FREE

Partner

Cisco Firepower

Cisco

Cisco Firepower Management Center Integration with ArcSight

205

FREE

Community

MITRE ATTACK Package for ArcSight Logger

Sliman Mansour

The Logger MITRE ATT&CK Package is a set of Logger Searches which let you hunt MITRE ATT&CK related activity.

112

Micro Focus COMMUNITY

Management Center (ArcMC)

Micro Focus

Focus on threats, not on tools. ArcSight Management Center (ArcMC) is a centralized security management center that manages large deployments of ArcSight solutions

1,811

FREE

Community

Customizing Rules to Work with ArcSight MITRE Package

Sliman Mansour

How To Customize Your Rules so that it works with ArcSight MITRE ATT&CK content

351

FREE

Community

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

776

FREE

Micro Focus COMMUNITY

Activate Base

Micro Focus

ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.

5,175

FREE

Community

Microsoft Sysmon FlexConnector

Kevin Q

FlexConnector for the extraction and categorisation of the “Microsoft-Windows-Sysmon/Operational” Windows Event Log using Microfocus ArcSight Windows Native SmartConnector Updated for Sysmon V 10.x

819

FREE

Community

COVID-19 Security Package from SOC Prime

Aleks Bredikhin

COVID-19 Security Package from SOC Prime is the set of search queries to detect the most active attacks that were detected during the COVID-19 specific phishing and other threats brought on by increased teleworking.

255

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,371

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,990

FREE

Community

Interset ESM Integration

Josh Mahonin

ArcSight and Interset empowers a layered analytics approach, providing analytics to solve the right type of use cases, bringing to bear best of breed technologies to optimize security operations and dramatically improve organizations’ security postures.

209
NEW

View 20 items

Logger

View 15 items

Partner Integrations

View 96 items

SmartConnectors

View 1 item

FlexConnectors

View 32 items

User Behavior Analytics

View 1 item

Products

View 10 items

Resource Center

View 16 items

Activate Product Packages

View 45 items

Classic Packages

View 14 items

Utilities and Tools

View 29 items

FalseCONNECT

View 1 item

Activate Packages

View 42 items

News & more

http://www8.hp.com/us/en/software-solutions/arcsight-logger-log-management/try-now.html

ArcSight Recon

ArcSight Recon is a comprehensive log management and security analytics solution that eases compliance burdens and accelerates forensic investigation for security professionals. It combines the compliance, storage and reporting needs of log management with the capabilities of big-data search and analysis. Recon is built for security event logs and is therefore more intuitive and accessible for security analysts, and it doesn’t require a DBA to operate.

Learn More

ArcSight Acquires SOAR

We are very excited to announce the acquisition of Atar Labs as they join the Micro Focus family! As long time SOAR partner with deep integrations into our ArcSight SIEM platform, you can enable your SOC to automate repetitive activities, improve analyst efficiency, and monitor and govern security operations performance with ease. Moving into the future, the full integration of SOAR into ArcSight’s unified platform will empower you with a holistic security posture to better detect, respond, and remediate threats.

Read the SOAR blog post

ArcSight’s Latest and Greatest

Read news, features and information about the latest ArcSight release. Learn about our newest products and the overall direction for security operations. Key highlights for each product within the portfolio give a quick overview of what’s new with ArcSight. Links to the newest product documentation are listed for more information. A version reference table helps you keep track of the latest versions for all your ArcSight products.

Sign in

ArcSight Recon is Here!

COVID-19 Cyber Threats

Micro Focus MITRE ATT&CK Navigator

Unmatched Security with ArcSight Interset Behavioral Analytics

Enterprise Security Manager (ESM)

Firewall Monitoring

DNS Security Check

Logstash ArcSight Module

InQuest

SecurityBridge for SAP

IPv4 Internet Dark Zones Update

ATAR Labs

Activate P-Cisco ASA

Common Event Format Guide

Logger

ESM Default Content

MSSP Usage Report

ApplicationView

Anomalous Traffic Detection

L2-WannaCry Malware Detection - Situational Awareness

Activate P-Lenel Onguard2013

Ransomware Hunter

Logstash ArcSight Module

L3-Base - Threat and Impact Analysis

ESM Default Content

L1-Threat Intelligence – Indicators and Warnings

Web Application Security Framework

Activate P-Websense Security

File Hash Analytics

Cofense Triage

Illusive Network

Malware Beaconing Detection

FortiSOAR

ArcSight SmartConnector Parser Update

ESM Default Content

Sattrix

ESM Default Content

ArcSight SmartConnector Parser Update

Connector

Malware Beaconing Detection

Enterprise Security Manager (ESM)

Cisco Firepower

MITRE ATTACK Package for ArcSight Logger

Management Center (ArcMC)

Customizing Rules to Work with ArcSight MITRE Package

Palo Alto Networks Next-Generation Firewalls

Activate Base

Microsoft Sysmon FlexConnector

COVID-19 Security Package from SOC Prime

Firewall Monitoring

L1-Threat Intelligence – Indicators and Warnings

Interset ESM Integration

NEW

Logger

Partner Integrations

SmartConnectors

FlexConnectors

User Behavior Analytics

Products

Resource Center

Activate Product Packages

Classic Packages

Utilities and Tools

FalseCONNECT

Activate Packages

News & more

ArcSight Recon

ArcSight Acquires SOAR

ArcSight’s Latest and Greatest

Want to Contribute to the ArcSight Marketplace?

Sign up now, or contact us for more information.