ArcSight Marketplace

FREE

Micro Focus COMMUNITY

RSA ACE SNMP Trap Parser Override

Micro Focus

Puts the Sending Agent into the Device Address field.

107

FREE

Micro Focus COMMUNITY

Integration-Okta

Micro Focus

Okta Integration for ArcSight SOAR

32

FREE

Community

Endgame

Endgame

Endgame is the comprehensive endpoint security platform that prevents, detects, and responds to known and unknown threats at the earliest and all stages of the attack lifecycle. Endgame prevents breaches and transforms security analysts into Hunters.

100

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,632

FREE

Micro Focus COMMUNITY

Brute Force Attack

Micro Focus

The Brute Force Attack use case uncovers and tracks, in real-time, attempts and confirmed attacks using a brute force technique on network assets and applications.

1,744

Community

EclecticIQ Platform Integration for Arcsight ESM

EclecticIQ

EclecticIQ Platform is a Threat Intelligence Platform that provides threat analysts, incident analysts, security analysts, fraud analysts, and risk analysts a comprehensive workspace for cyber threat management, analysis, and collaboration.

137

FREE

Community

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

961

FREE

Micro Focus COMMUNITY

Activate Framework Wiki

Micro Focus

Everything you need to know about Activate!

378

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

391

FREE

Micro Focus COMMUNITY

IDS IPS Monitoring Package

Micro Focus

The IDS - IPS Monitoring use case provides an overview of the activity identified by the Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) on your network

1,190

FREE

Micro Focus COMMUNITY

Apache Log4j Vulnerabilities

Micro Focus

Content to detect and monitor the Apache Log4j RCE vulnerability identified as CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-4104 leveraging current release of ArcSight ESM, Logger, and Recon.

151

FREE

Micro Focus COMMUNITY

ESM Default Content

Micro Focus

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT& CK framework.

235

FREE

Community

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

1,219

Community

Recorded Future

Recorded Future

Recorded Future arms you with real-time threat intelligence so you can proactively defend your organization against cyber attacks.

176

FREE

Micro Focus COMMUNITY

IIS Server FlexConnector

Micro Focus

The SmartConnector for Microsoft IIS File lets you import activity and alarm events

422

FREE

Micro Focus COMMUNITY

WUC Parser Overrides

Micro Focus

Various overrides for the WUC

312
FREE

Micro Focus COMMUNITY

ESM Default Content

Micro Focus

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT& CK framework.

235

FREE

Micro Focus COMMUNITY

Partner Pay-per-Use 2021 License Reporting

Micro Focus

Use this report to track usage for the Service Provider Partner Pay-Per-Use 2021 license.

26

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

391

FREE

Micro Focus COMMUNITY

Activate P-Lenel Onguard2013

Micro Focus

This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.

187

FREE

Community

Cofense Triage

Cofense, Inc.

Cofense Triage provides security operations center (SOC) analysts and incident responders insight into ongoing spear-phishing attacks by automating the analysis and orchestrating the workflow associated with employee reported suspicious emails.

48

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays, and monitors the Threat Model, which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

2,144

FREE

Micro Focus COMMUNITY

L3-Base - Threat and Impact Analysis

Micro Focus

This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.

422

FREE

Micro Focus COMMUNITY

Activate P-Websense Security

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.

605

$1100

Community

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.
FREE

Micro Focus

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

7

FREE

Micro Focus COMMUNITY

Apache Log4j Vulnerabilities

Micro Focus

Content to detect and monitor the Apache Log4j RCE vulnerability identified as CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-4104 leveraging current release of ArcSight ESM, Logger, and Recon.

151

FREE

Micro Focus

Agent Manager

Micro Focus

This Connector allows you to receive data from Agent manager event sources and collect generated events.

6

FREE

Micro Focus

Microsoft Active Directory And Windows

Micro Focus

This collector provides data-capture capabilities for Microsoft Active Directory And Windows and related products.

13

FREE

Micro Focus

Microsoft Active Directory Identities

Micro Focus

This NetIQ Sentinel Collector provides Identity-capture capabilities for Microsoft Active Directory and related products.

1

FREE

Micro Focus COMMUNITY

ESM Default Content

Micro Focus

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT& CK framework.

235

FREE

Micro Focus COMMUNITY

Coronavirus (COVID-19) - Official Content

Micro Focus

This package detects coronavirus related malicious attacks,

13

FREE

Micro Focus COMMUNITY

Playbook-URL Enrichment and Block on Sophos XG Playbook

Micro Focus

This playbook enriches URLs from various open TI databases and MISP server and asks Analyst’s decision for blocking the suspicious URLs on Sophos XG

4

FREE

Micro Focus COMMUNITY

Playbook-URL Enrichment and Block on Palo Alto Panorama...

Micro Focus

This playbook enriches URLs from various open TI databases and MISP server and asks Analyst’s decision for blocking the suspicious URLs on Palo Alto Panorama

3

FREE

Micro Focus COMMUNITY

Playbook-URL Enrichment and Block on McAfee Web GW Play...

Micro Focus

This playbook enriches URLs from various open TI databases and MISP server and asks Analyst’s decision for blocking the suspicious URLs on McAfee Web GW

5
FREE

Micro Focus COMMUNITY

Apache Log4j Vulnerabilities

Micro Focus

Content to detect and monitor the Apache Log4j RCE vulnerability identified as CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-4104 leveraging current release of ArcSight ESM, Logger, and Recon.

151

FREE

Micro Focus COMMUNITY

ESM Default Content

Micro Focus

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT& CK framework.

235

FREE

Micro Focus

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

7

FREE

Micro Focus COMMUNITY

ArcSight ESM and SOAR Integration Content

Micro Focus

ArcSight ESM content to integrate with ArcSight SOAR.

220

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

2,010

Micro Focus COMMUNITY

Connector

Micro Focus

ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)

7,451

FREE

Partner

Cisco Firepower (eStreamer and eNcore)

Cisco

Cisco Firepower Management Center Integration with ArcSight

903

Micro Focus COMMUNITY

Express

Micro Focus

The all-in-one Security Information and Event Management (SIEM) appliance combines superior log management and SIEM through ArcSight Express appliance to enable you to quickly monitor top security devices such as firewall, IPS, or endpoint security, etc.

374

FREE

Micro Focus COMMUNITY

MITRE ATTACK Evaluations Round 3 - Carbanak and FIN7 Ad...

Micro Focus

This package was used during MITRE ATT&CK Carbanak+FIN7 emulation enterprise evaluation in October 2020.

226

FREE

Micro Focus COMMUNITY

MITRE ATTACK Package for ArcSight Logger

Micro Focus

The Logger MITRE ATT&CK Package is a set of Logger Searches which let you hunt MITRE ATT&CK related activity.

505

Micro Focus COMMUNITY

Common Event Format Guide

Micro Focus

Standardize event data at the source using the Common Event Format, an open log management standard.

574

FREE

Community

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

1,219

FREE

Micro Focus COMMUNITY

Activate Base

Micro Focus

ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.

5,603

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

3,922

FREE

Micro Focus COMMUNITY

Brute Force Attack

Micro Focus

The Brute Force Attack use case uncovers and tracks, in real-time, attempts and confirmed attacks using a brute force technique on network assets and applications.

1,744

FREE

Micro Focus COMMUNITY

ArcSight Intelligence and ArcSight ESM Integration

Micro Focus

Optimize your security operations with the ArcSight platform. ArcSight empowers a layered analytics approach by integrating two powerful technologies, ArcSight ESM and ArcSight Intelligence, to quickly and effectively detect both known and unknown threats.

516
ArcSight

View 213 items

Partner Integrations

View 89 items

Products

View 10 items

Resource Center

View 15 items

Sentinel

View 169 items

News & more

ArcSight Recon

ArcSight Recon is a comprehensive log management and security analytics solution that eases compliance burdens and accelerates forensic investigation for security professionals. It combines the compliance, storage and reporting needs of log management with the capabilities of big-data search and analysis. Recon is built for security event logs and is therefore more intuitive and accessible for security analysts, and it doesn’t require a DBA to operate.

Learn More

ArcSight Acquires SOAR

We are very excited to announce the acquisition of Atar Labs as they join the Micro Focus family! As long time SOAR partner with deep integrations into our ArcSight SIEM platform, you can enable your SOC to automate repetitive activities, improve analyst efficiency, and monitor and govern security operations performance with ease. Moving into the future, the full integration of SOAR into ArcSight’s unified platform will empower you with a holistic security posture to better detect, respond, and remediate threats.

Read the SOAR blog post

ArcSight’s Latest and Greatest

Read news, features and information about the latest ArcSight release. Learn about our newest products and the overall direction for security operations. Key highlights for each product within the portfolio give a quick overview of what’s new with ArcSight. Links to the newest product documentation are listed for more information. A version reference table helps you keep track of the latest versions for all your ArcSight products.

Sign in

ArcSight Recon is Here!

COVID-19 Cyber Threats

Micro Focus MITRE ATT&CK Navigator

Unmatched Security with ArcSight Interset Behavioral Analytics

RSA ACE SNMP Trap Parser Override

Integration-Okta

Endgame

Firewall Monitoring

Brute Force Attack

EclecticIQ Platform Integration for Arcsight ESM

DNS Security Check

Activate Framework Wiki

Logstash ArcSight Module

IDS IPS Monitoring Package

Apache Log4j Vulnerabilities

ESM Default Content

Palo Alto Networks Next-Generation Firewalls

Recorded Future

IIS Server FlexConnector

WUC Parser Overrides

ESM Default Content

Partner Pay-per-Use 2021 License Reporting

Logstash ArcSight Module

Activate P-Lenel Onguard2013

Cofense Triage

L1-Threat Intelligence – Indicators and Warnings

L3-Base - Threat and Impact Analysis

Activate P-Websense Security

Web Application Security Framework

ArcSight SmartConnector Parser Update

Apache Log4j Vulnerabilities

Agent Manager

Microsoft Active Directory And Windows

Microsoft Active Directory Identities

ESM Default Content

Coronavirus (COVID-19) - Official Content

Playbook-URL Enrichment and Block on Sophos XG Playbook

Playbook-URL Enrichment and Block on Palo Alto Panorama...

Playbook-URL Enrichment and Block on McAfee Web GW Play...

Apache Log4j Vulnerabilities

ESM Default Content

ArcSight SmartConnector Parser Update

ArcSight ESM and SOAR Integration Content

Logger

Connector

Cisco Firepower (eStreamer and eNcore)

Express

MITRE ATTACK Evaluations Round 3 - Carbanak and FIN7 Ad...

MITRE ATTACK Package for ArcSight Logger

Common Event Format Guide

Palo Alto Networks Next-Generation Firewalls

Activate Base

Enterprise Security Manager (ESM)

Brute Force Attack

ArcSight Intelligence and ArcSight ESM Integration

ArcSight

Partner Integrations

Products

Resource Center

Sentinel

News & more

ArcSight Recon

ArcSight Acquires SOAR

ArcSight’s Latest and Greatest

Want to Contribute to the ArcSight Marketplace?

Sign up now, or contact us for more information.