ArcSight Marketplace | Micro Focus

FREE

Micro Focus COMMUNITY

Activate P-Lenel Onguard2013

Micro Focus

This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.

149

FREE

Micro Focus COMMUNITY

L2-Threat Intelligence – Situational Awareness

Micro Focus

This package builds upon the L1 Threat Intelligence package to provide detection and reporting on network traffic to suspicious entities.

1,094

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,648

$600

Community

File Hash Analytics

SOC Prime

File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.

FREE

Community

Cofense Triage

Cofense, Inc.

Cofense Triage provides security operations center (SOC) analysts and incident responders insight into ongoing spear phishing attacks by automating the analysis and orchestrating the workflow associated with employee reported suspicious emails.

23

$450

Community

Ransomware Hunter

SOC Prime

Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.

FREE

Micro Focus COMMUNITY

L3-Base - Threat and Impact Analysis

Micro Focus

This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.

229

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

274

FREE

Micro Focus COMMUNITY

Activate P-Websense Security

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.

530

$1100

Community

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.

See all items
FREE

Micro Focus COMMUNITY

Activate P-Check Point VPN-1 and FW-1

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories. Install this package if you collect Check Point FW-1 logs for your ESM.

897

Micro Focus COMMUNITY

Endace

Micro Focus

Micro Focus ArcSight and Endace help security analysts rapidly investigate issues presented in ArcSight with in-context drill down to full packet data to confidently and accurately investigate any network issue or security threat.

38

FREE

Community

Microsoft Sysmon FlexConnector

Kevin Q

FlexConnector for the extraction and categorisation of the “Microsoft-Windows-Sysmon/Operational” Windows Event Log using Microfocus ArcSight Windows Native SmartConnector Updated for Sysmon V 10.x

560

FREE

Micro Focus COMMUNITY

ESET

Micro Focus

This guide provides information for configuring the ESET Mail Security for Microsoft Exchange Server integration for ArcSight ESM. This integration is supported on ESM versions [6.0.0.1333] and later, with ESET Mail Security version 7.1.

25

See all items
FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

8,098

Micro Focus COMMUNITY

Connector

Micro Focus

ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)

3,983

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,059

FREE

Micro Focus COMMUNITY

Activate Base

Micro Focus

ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.

4,517

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

1,320

FREE

Community

Microsoft Sysmon FlexConnector

Kevin Q

FlexConnector for the extraction and categorisation of the “Microsoft-Windows-Sysmon/Operational” Windows Event Log using Microfocus ArcSight Windows Native SmartConnector Updated for Sysmon V 10.x

560

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,648

Micro Focus COMMUNITY

Management Center (ArcMC)

Micro Focus

Focus on threats, not on tools. ArcSight Management Center (ArcMC) is a centralized security management center that manages large deployments of ArcSight solutions

1,370

FREE

Community

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

643

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,158

FREE

Micro Focus COMMUNITY

L1-Perimeter Monitoring - Indicators and Warnings

Micro Focus

The L1 Perimeter Monitoring - Indicators and Warnings content is focused on events regarding boundary transitions and connections between entities.

1,196

FREE

Micro Focus COMMUNITY

Activate P-Check Point VPN-1 and FW-1

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories. Install this package if you collect Check Point FW-1 logs for your ESM.

897

FREE

Community

Service Accounts Tracker

SOC Prime

Service accounts is a necessary evil in every company of any size. Service accounts mostly unpersonalized, shared, privileged, with non expired passwords.

610

FREE

Micro Focus COMMUNITY

Brute Force Attack

Micro Focus

The Brute Force Attack use case uncovers and tracks, in real time, attempts and confirmed attacks using a brute force technique on network assets and applications.

1,229

FREE

Micro Focus COMMUNITY

Activate License

Micro Focus

Open Source License for Activate Packages

821

FREE

Micro Focus COMMUNITY

L1-Entity Monitoring

Micro Focus

The L1-Entity Monitoring - Indicators and Warnings package is designed to identify anomalies dealing with account authentication and management.

1,063

FREE

Micro Focus COMMUNITY

Activate P-Windows

Micro Focus

The P-Microsoft Windows package offers an easy way to monitor both host and entity related individual incidents. This package supports L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.

1,309

FREE

Micro Focus COMMUNITY

Activate P-Palo Alto Networks PAN-OS

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories. Install this package if you collect Palo Alto Networks PAN-OS logs for your ESM.

908

FREE

Micro Focus COMMUNITY

L1-Network Monitoring - Indicators and Warnings

Micro Focus

The L1-Network Monitoring - Indicators and Warnings content is focused on network events regarding the traffic and information in transit through the network.

1,151

FREE

Micro Focus COMMUNITY

L1-Malware Monitoring

Micro Focus

L1 Malware Monitoring - Indicators and Warnings package is intended to provide both simple indicators of potential malware incidents as well as a framework to support L2 Malware Monitoring - Situational Awareness content .

1,080

FREE

Micro Focus COMMUNITY

Activate P-Linux

Micro Focus

The P-Linux package contains resources that support L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.

884

FREE

Micro Focus COMMUNITY

IDS IPS Monitoring Package

Micro Focus

The IDS - IPS Monitoring use case provides an overview of the activity identified by the Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) on your network

911

FREE

Micro Focus COMMUNITY

L2-Threat Intelligence – Situational Awareness

Micro Focus

This package builds upon the L1 Threat Intelligence package to provide detection and reporting on network traffic to suspicious entities.

1,094

Micro Focus COMMUNITY

Endace

Micro Focus

Micro Focus ArcSight and Endace help security analysts rapidly investigate issues presented in ArcSight with in-context drill down to full packet data to confidently and accurately investigate any network issue or security threat.

38

FREE

Micro Focus COMMUNITY

L1-Host Monitoring - Indicators and Warnings

Micro Focus

The L1-Host Monitoring - Indicators and Warnings package is designed to monitor and track the availability of system host and service accounts which may have certain security and/or operational significance.

1,195

See all items
NEW

View 15 items

Activate Packages

View 42 items

Activate Product Packages

View 33 items

Logger

View 11 items

Partner Integrations

View 86 items

Classic Packages

View 14 items

FlexConnectors

View 32 items

SmartConnectors

View 1 item

Products

View 11 items

Resource Center

View 17 items

Utilities and Tools

View 26 items

FalseCONNECT

View 1 item

News & more

http://www8.hp.com/us/en/software-solutions/arcsight-logger-log-management/try-now.html

ArcSight Investigate

ArcSight Investigate is a next generation hunt and investigation solution built on a new advanced analytics platform to serve the evolving needs of security teams. It helps hunt and defeat unknown threats by processing large volumes of data almost instantly. Security analysts are empowered with an intuitive solution to investigate higher-priority threats quickly and accurately. With the ability to leverage data lakes, ArcSight Investigate provides insights from Big Data to drive real value.

The Next Generation of SOC

Micro Focus introduced the Micro Focus ArcSight Data Platform (ADP 2.0) to lay the foundation for combating the growing security challenges that security operations face in detecting and responding to cyber threats. Micro Focus ADP 2.0 delivers up to 50 percent faster search and provides a centralized Event Broker that ingests 1 million events per second.

Notice: Branded Content

Certain versions of content (“Material”) accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.

Sign in

Welcome to ArcSight Marketplace

Just launched! All new ArcSight Investigate

Explore the newest Activate Packages!

Activate P-Lenel Onguard2013

L2-Threat Intelligence – Situational Awareness

L1-Threat Intelligence – Indicators and Warnings

File Hash Analytics

Cofense Triage

Ransomware Hunter

L3-Base - Threat and Impact Analysis

Logstash ArcSight Module

Activate P-Websense Security

Web Application Security Framework

Activate P-Check Point VPN-1 and FW-1

Endace

Microsoft Sysmon FlexConnector

ESET

ArcSight SmartConnector Parser Update

Connector

Enterprise Security Manager (ESM)

Activate Base

Logger

Microsoft Sysmon FlexConnector

L1-Threat Intelligence – Indicators and Warnings

Management Center (ArcMC)

DNS Security Check

Firewall Monitoring

L1-Perimeter Monitoring - Indicators and Warnings

Activate P-Check Point VPN-1 and FW-1

Service Accounts Tracker

Brute Force Attack

Activate License

L1-Entity Monitoring

Activate P-Windows

Activate P-Palo Alto Networks PAN-OS

L1-Network Monitoring - Indicators and Warnings

L1-Malware Monitoring

Activate P-Linux

IDS IPS Monitoring Package

L2-Threat Intelligence – Situational Awareness

Endace

L1-Host Monitoring - Indicators and Warnings

NEW

Activate Packages

Activate Product Packages

Logger

Partner Integrations

Classic Packages

FlexConnectors

SmartConnectors

Products

Resource Center

Utilities and Tools

FalseCONNECT

News & more

ArcSight Investigate

The Next Generation of SOC

Notice: Branded Content

Want to Contribute to the ArcSight Marketplace?

Sign up now, or contact us for more information.