ArcSight Marketplace | Micro Focus

$450

Community

Ransomware Hunter

SOC Prime

Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.

FREE

Community

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

291

FREE

Micro Focus COMMUNITY

L3-Base - Threat and Impact Analysis

Micro Focus

This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.

276

FREE

Micro Focus COMMUNITY

L1-Threat Intelligence – Indicators and Warnings

Micro Focus

This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.

1,751

FREE

Micro Focus COMMUNITY

Activate P-Lenel Onguard2013

Micro Focus

This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.

154

FREE

Micro Focus COMMUNITY

L2-Threat Intelligence – Situational Awareness

Micro Focus

This package builds upon the L1 Threat Intelligence package to provide detection and reporting on network traffic to suspicious entities.

1,140

$1100

Community

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.

FREE

Micro Focus COMMUNITY

Activate P-Websense Security

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.

551

$600

Community

File Hash Analytics

SOC Prime

File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.

FREE

Community

Cofense Triage

Cofense, Inc.

Cofense Triage provides security operations center (SOC) analysts and incident responders insight into ongoing spear phishing attacks by automating the analysis and orchestrating the workflow associated with employee reported suspicious emails.

25

See all items
FREE

Community

Security Threat Monitoring

Yun Peng

This package is designed to detect numerous of security threats in your company. It also includes techniques from the MITRE ATT&CK framework.

36

FREE

Micro Focus COMMUNITY

L2-Malware Monitoring Email - Situational Awareness

Micro Focus

This package provides resources that support email malware detection to alert the SOC Analyst or Operator, and start the Incident Response workflow.

348

FREE

Micro Focus COMMUNITY

L1-Malware Monitoring

Micro Focus

L1 Malware Monitoring - Indicators and Warnings package is intended to provide both simple indicators of potential malware incidents as well as a framework to support L2 Malware Monitoring - Situational Awareness content .

1,140

FREE

Micro Focus COMMUNITY

L2-Host Monitoring - Situational Awareness

Micro Focus

The L2-Host Monitoring - Situational Awareness package is designed to monitor and track these correlation or internal audit events for critical system hosts or essential services on a critical host.

951

FREE

Micro Focus COMMUNITY

L2-Malware Monitoring

Micro Focus

L2-Malware Monitoring - Situational Awareness This package is intended to provide ArcSight context to L1-Malware Monitoring - Indicators and Warnings events, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator.

767

FREE

Micro Focus COMMUNITY

L1-Host Monitoring - Indicators and Warnings

Micro Focus

The L1-Host Monitoring - Indicators and Warnings package is designed to monitor and track the availability of system host and service accounts which may have certain security and/or operational significance.

1,261

FREE

Micro Focus COMMUNITY

L1-Network Monitoring - Indicators and Warnings

Micro Focus

The L1-Network Monitoring - Indicators and Warnings content is focused on network events regarding the traffic and information in transit through the network.

1,215

FREE

Micro Focus COMMUNITY

L2-Network Monitoring - Situational Awareness

Micro Focus

The L2-Network Monitoring - Situational Awareness content is focused on network events regarding the traffic and information in transit through the network and affecting your critical systems.

829

FREE

Micro Focus COMMUNITY

P-Microsoft PowerShell

Micro Focus

The P-Microsoft Windows package offers an easy way to monitor events received through PowerShell scripts and commands.

27

FREE

Community

Activate P-Citrix

Yun Peng

Activate P-Citrix package is designed to handle events generated by Citrix devices. This package supports L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.

17

See all items
FREE

Micro Focus COMMUNITY

WUC Mapper

Micro Focus

Map files to correct 2 WUC issues.

135

FREE

Micro Focus COMMUNITY

Activate P-Linux

Micro Focus

The P-Linux package contains resources that support L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.

938

FREE

Micro Focus COMMUNITY

ArcSight SmartConnector Parser Update

Micro Focus

Monthly SmartConnector Parser Release

8,592

Micro Focus COMMUNITY

Enterprise Security Manager (ESM)

Micro Focus

ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.

2,276

FREE

Community

Microsoft Sysmon FlexConnector

Kevin Q

FlexConnector for the extraction and categorisation of the “Microsoft-Windows-Sysmon/Operational” Windows Event Log using Microfocus ArcSight Windows Native SmartConnector Updated for Sysmon V 10.x

630

Micro Focus COMMUNITY

Connector

Micro Focus

ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)

4,464

Micro Focus COMMUNITY

Logger

Micro Focus

ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.

1,457

Micro Focus COMMUNITY

Management Center (ArcMC)

Micro Focus

Focus on threats, not on tools. ArcSight Management Center (ArcMC) is a centralized security management center that manages large deployments of ArcSight solutions

1,494

FREE

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1,227

FREE

Micro Focus COMMUNITY

L2-Entity Monitoring

Micro Focus

The L2-Entity Monitoring - Situational Awareness package is designed to identify anomalies dealing with account authentication and management.

784

See all items
SmartConnectors

View 1 item

Logger

View 11 items

Products

View 11 items

Resource Center

View 17 items

Classic Packages

View 14 items

FlexConnectors

View 32 items

Activate Packages

View 42 items

NEW

View 20 items

Activate Product Packages

View 45 items

Utilities and Tools

View 27 items

Partner Integrations

View 86 items

FalseCONNECT

View 1 item

News & more

http://www8.hp.com/us/en/software-solutions/arcsight-logger-log-management/try-now.html

ArcSight Investigate

ArcSight Investigate is a next generation hunt and investigation solution built on a new advanced analytics platform to serve the evolving needs of security teams. It helps hunt and defeat unknown threats by processing large volumes of data almost instantly. Security analysts are empowered with an intuitive solution to investigate higher-priority threats quickly and accurately. With the ability to leverage data lakes, ArcSight Investigate provides insights from Big Data to drive real value.

The Next Generation of SOC

Micro Focus introduced the Micro Focus ArcSight Data Platform (ADP 2.0) to lay the foundation for combating the growing security challenges that security operations face in detecting and responding to cyber threats. Micro Focus ADP 2.0 delivers up to 50 percent faster search and provides a centralized Event Broker that ingests 1 million events per second.

Notice: Branded Content

Certain versions of content (“Material”) accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.

Sign in

Welcome to ArcSight Marketplace

Discover the Micro Focus Community

Just launched! All new ArcSight Investigate

Explore the newest Activate Packages!

Ransomware Hunter

Logstash ArcSight Module

L3-Base - Threat and Impact Analysis

L1-Threat Intelligence – Indicators and Warnings

Activate P-Lenel Onguard2013

L2-Threat Intelligence – Situational Awareness

Web Application Security Framework

Activate P-Websense Security

File Hash Analytics

Cofense Triage

Security Threat Monitoring

L2-Malware Monitoring Email - Situational Awareness

L1-Malware Monitoring

L2-Host Monitoring - Situational Awareness

L2-Malware Monitoring

L1-Host Monitoring - Indicators and Warnings

L1-Network Monitoring - Indicators and Warnings

L2-Network Monitoring - Situational Awareness

P-Microsoft PowerShell

Activate P-Citrix

WUC Mapper

Activate P-Linux

ArcSight SmartConnector Parser Update

Enterprise Security Manager (ESM)

Microsoft Sysmon FlexConnector

Connector

Logger

Management Center (ArcMC)

Firewall Monitoring

L2-Entity Monitoring

SmartConnectors

Logger

Products

Resource Center

Classic Packages

FlexConnectors

Activate Packages

NEW

Activate Product Packages

Utilities and Tools

Partner Integrations

FalseCONNECT

News & more

ArcSight Investigate

The Next Generation of SOC

Notice: Branded Content

Want to Contribute to the ArcSight Marketplace?

Sign up now, or contact us for more information.