We use cookies.

Micro Focus uses cookies to give you the best online experience. If you continue to use this site, you agree to the use of cookies. Please see our cookie policy for details.
Agree

ArcSight Marketplace
  • Categories
    NEW
    22 items
    Activate Packages
    41 items
    Logger
    9 items
    Activate Product Packages
    27 items
    Partner Integrations
    83 items
    Classic Packages
    14 items
    FlexConnectors
    31 items
    SmartConnectors
    1 item
    Products
    10 items
    Resource Center
    18 items
    Utilities and Tools
    19 items
    FalseCONNECT
    1 item
  • Dashboard
    Admin
    All items Manage roles Entitlement lookup
    Reports
    Developers Downloads
    Settings
    Marketplace Categories Homepage Partners Developer program Company Products
    My Uploads
    items Views & downloads Payment reports Billing details
    My Downloads
    Free items Purchased items
    My Account
    My profile Manage notifications
    Dashboard
    My Uploads
    items Views & downloads Payment reports Billing details
    My Downloads
    Free items Purchased items
    My Account
    My profile Manage notifications
    Dashboard
    Approver
    All items Entitlement lookup
    My Uploads
    items Views & downloads Payment reports Billing details
    My Downloads
    Free items Purchased items
    My Account
    My profile Manage notifications
    Dashboard
    My Downloads
    Free items Purchased items
    My Account
    My profile Manage notifications
    Dashboard
    Sign in or Sign up

    Check here to see and manage items, upgrades, and purchases.

  • For developers
  • Documents
  • Community
  • Contact us
  • Hi Sign in
    • Dashboard Dashboard Dashboard

      See and manage items, upgrades, and purchases.

    • My profile

    • Sign out
    • Sign in

      See my downloads, check purchases, and edit profile.

    • Sign up

      Download items and upgrades or join as a developer.

ArcSight Marketplace
  • Categories
  • Dashboard Dashboard Dashboard
    Dashboard
  • For developers
  • Documents
  • Community
  • Contact us
  • Profile
  • Sign out
  • Sign in
  • Sign up
  • Welcome to ArcSight Marketplace

    Welcome to ArcSight Marketplace

    Rapidly provision your ArcSight SIEM deployment with trusted security use cases and best practices.

    Learn more
  • Protect 2017

    Protect 2017

    The Protect 2017 security conference was held in Washington, DC on September 11-13, our first conference as Micro Focus. See what you missed at Protect this year.

    Access Protect Online
  • Just launched! All new ArcSight Investigate

    Just launched! All new ArcSight Investigate

    Also released: ArcSight Data Platform 2.2 update

    More Information
  • Explore the newest Activate Packages!

    Explore the newest Activate Packages!

    Newly released: Activate L1 and L2 Malware Monitoring Email and updated: IOCs for HIDDEN COBRA in L1 Threat Intelligence

    Learn More
  • Featured
  • Newest
  • Popular
  • Categories
  • Free
    Micro Focus COMMUNITY

    L1-WannaCry Malware Detection - Indicators and Warnings

    Micro Focus

    L1-WannaCry Malware Detection - Indicators and Warnings package is intended to support L2-APT10 WannaCry Malware Detection - Situational Awareness to detect WannaCry Malware IOCs incidents.
    453
    Free
    Micro Focus COMMUNITY

    L2-WannaCry Malware Detection - Situational Awareness

    Micro Focus

    This package is intended to detect WannaCry malware IOCs incidents and provide ArcSight context to them, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator of potential WannaCry IOCs in critical hosts.
    393
    Free
    Micro Focus COMMUNITY

    Activate P-Lenel Onguard2013

    Micro Focus

    This product-specific package includes the resources that support the Physical Badge Access monitoring Use cases. Install the package once you collect Lenel Onguard2013 events.
    101
    Free
    Micro Focus COMMUNITY

    L2-Data Security Monitoring - DLP

    Micro Focus

    The L2-Data Security Monitoring - Data Loss Prevention (DLP) - Situational Awareness package contains resources to monitor DLP Information leak events that occur on a critical host.
    397
    Free
    Community

    File Hash Analytics

    SOC Prime

    File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.
    10
    Free
    Community

    Web Application Security Framework

    SOC Prime

    The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.
    10
    Free
    Micro Focus COMMUNITY

    L2-Malware Monitoring

    Micro Focus

    L2-Malware Monitoring - Situational Awareness This package is intended to provide ArcSight context to L1-Malware Monitoring - Indicators and Warnings events, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator.
    529
    Free
    Micro Focus COMMUNITY

    Activate P-Websense Security

    Micro Focus

    This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories.
    433
    Free
    Community

    Ransomware Hunter

    SOC Prime

    Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.
    14
    Free
    Community

    Logstash ArcSight Module

    Elastic

    The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.
    167


    See all items
  • Free
    Micro Focus COMMUNITY

    Activate P-Atalla HSM

    Micro Focus

    This package identifies Micro Focus Atalla HSM product events
    80
    Community

    Fortinet FortiGate Enterprise Firewalls

    Fortinet

    Fortinet's award-winning FortiGate enterprise firewall platform provides end-to-end security across your entire network. This listing provides documentation on the Fortinet-Micro Focus ArcSight Logger integrated solution.
    358
    Free
    Micro Focus COMMUNITY

    Activate Base

    Micro Focus

    ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.
    3,558
    Free
    Micro Focus COMMUNITY

    L3-Base - Threat and Impact Analysis

    Micro Focus

    This package contains the supporting resources (active lists and rules) for tracking the activity of systems, user accounts, service accounts, system accounts, etc., across the ArcSight Attack Life Cycle phases for this method.
    30
    Free
    Micro Focus

    ArcSight SmartConnector Parser Update

    Micro Focus

    Monthly SmartConnector Parser Release
    5,624
    Free
    Micro Focus COMMUNITY

    Which Tor

    Micro Focus

    An Integration command which check if IP address belongs to Tor or not
    87
    Free
    Micro Focus COMMUNITY

    L1-Perimeter Monitoring - Indicators and Warnings

    Micro Focus

    The L1 Perimeter Monitoring - Indicators and Warnings content is focused on events regarding boundary transitions and connections between entities.
    898
    Free
    Micro Focus COMMUNITY

    L2-Network Monitoring - Situational Awareness

    Micro Focus

    The L2-Network Monitoring - Situational Awareness content is focused on network events regarding the traffic and information in transit through the network and affecting your critical systems.
    604
    Free
    Micro Focus COMMUNITY

    L1-Network Monitoring - Indicators and Warnings

    Micro Focus

    The L1-Network Monitoring - Indicators and Warnings content is focused on network events regarding the traffic and information in transit through the network.
    873
    Free
    Micro Focus COMMUNITY

    Which Cloud

    Micro Focus

    An integration command to check if an IP address belongs to Cloud or Not
    46


    See all items
  • Free
    Micro Focus

    ArcSight SmartConnector Parser Update

    Micro Focus

    Monthly SmartConnector Parser Release
    5,624
    Free
    Micro Focus COMMUNITY

    Activate Base

    Micro Focus

    ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.
    3,558
    Micro Focus COMMUNITY

    Connector

    Micro Focus

    HPE ArcSight Connectors automate the process of collecting and managing logs from any device and in any format through normalization and categorization of logs into a unified format known as Common Event Format (CEF)
    1,965
    Micro Focus COMMUNITY

    Enterprise Security Manager (ESM)

    Micro Focus

    ArcSight ESM analyzes and correlates every event that occurs across the organization--every login, logoff, file access, database query--to deliver accurate prioritization of security risks and compliance violations.
    1,230
    Free
    Micro Focus COMMUNITY

    Activate P-Windows

    Micro Focus

    The P-Microsoft Windows package offers an easy way to monitor both host and entity related individual incidents. This package supports L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.
    896
    Micro Focus COMMUNITY

    Management Center (ArcMC)

    Micro Focus

    Focus on threats, not on tools. ArcSight Management Center (ArcMC) is a centralized security management center that manages large deployments of ArcSight solutions
    1,009
    Free
    Micro Focus COMMUNITY

    L1-Perimeter Monitoring - Indicators and Warnings

    Micro Focus

    The L1 Perimeter Monitoring - Indicators and Warnings content is focused on events regarding boundary transitions and connections between entities.
    898
    Free
    Micro Focus COMMUNITY

    L1-Threat Intelligence – Indicators and Warnings

    Micro Focus

    This package populates, displays and monitors the Threat Model , which is used to detect and contextualize potential malicious activity based on intelligence derived from a site-specific mix of threat intelligence sources.
    1,223
    Micro Focus COMMUNITY

    Logger

    Micro Focus

    ArcSight Logger delivers a cost-effective universal log management solution that unifies searching, reporting, alerting, and analysis across any type of enterprise machine data.
    761
    Free
    Micro Focus COMMUNITY

    L1-Network Monitoring - Indicators and Warnings

    Micro Focus

    The L1-Network Monitoring - Indicators and Warnings content is focused on network events regarding the traffic and information in transit through the network.
    873
    Free
    Micro Focus COMMUNITY

    Activate P-Linux

    Micro Focus

    The P-Linux package contains resources that support L1 & L2 Host Monitoring and L1 & L2 Entity Monitoring Use Cases and User Stories.
    607
    Free
    Micro Focus COMMUNITY

    Which Tor

    Micro Focus

    An Integration command which check if IP address belongs to Tor or not
    87
    Micro Focus COMMUNITY

    Activate Framework

    Micro Focus

    ArcSight Activate Framework is a modular content development framework that allows you to implement ArcSight SIEM quickly and effectively.
    635
    Free
    Micro Focus COMMUNITY

    IPv4 Internet Dark Zones Update

    Micro Focus

    The Zone Update package provides periodic updates to IPv4 address allocations and dark space information for ESM.
    832
    Free
    Micro Focus COMMUNITY

    Activate P-Check Point VPN-1 and FW-1

    Micro Focus

    This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories. Install this package if you collect Check Point FW-1 logs for your ESM.
    674
    Free
    Micro Focus COMMUNITY

    L2-Network Monitoring - Situational Awareness

    Micro Focus

    The L2-Network Monitoring - Situational Awareness content is focused on network events regarding the traffic and information in transit through the network and affecting your critical systems.
    604
    Free
    Micro Focus COMMUNITY

    L1-Malware Monitoring

    Micro Focus

    L1 Malware Monitoring - Indicators and Warnings package is intended to provide both simple indicators of potential malware incidents as well as a framework to support L2 Malware Monitoring - Situational Awareness content .
    773
    Free
    Micro Focus COMMUNITY

    Tool Commands Web App

    Micro Focus

    Tool Commands Web App enables you to load and run tool commands in ArcSight Command Center. The tool commands evaluate the connections on the network used by a channel event.
    428
    Free
    Micro Focus COMMUNITY

    Compliance Activate Plugin

    Micro Focus

    Compliance Activate Plugin is a package which provides an option to ingest ESM Compliance Insight Packages rules outputs into ArcSight Activate Main Channel.
    58
    Free
    Community

    DNS Security Check

    SOC Prime

    DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.
    377
    Free
    Micro Focus COMMUNITY

    L1-Host Monitoring - Indicators and Warnings

    Micro Focus

    The L1-Host Monitoring - Indicators and Warnings package is designed to monitor and track the availability of system host and service accounts which may have certain security and/or operational significance.
    918
    Free
    Micro Focus COMMUNITY

    Brute Force Attack Package for Logger

    Micro Focus

    The Brute Force Attack use case uncovers and tracks, attempts and confirmed attacks using a brute force technique on network assets and applications
    430
    Free
    Micro Focus COMMUNITY

    Anomalous Traffic Detection

    Micro Focus

    The Anomalous Traffic Detection use case helps you identify sudden spikes in network traffic so that you can detect potential malicious activity. Sudden spikes in traffic can be caused by scheduled backups or virus scanner updates inside your LAN.
    671
    Free
    Micro Focus COMMUNITY

    Brute Force Attack

    Micro Focus

    The Brute Force Attack use case uncovers and tracks, in real time, attempts and confirmed attacks using a brute force technique on network assets and applications.
    917


    See all items
  • NEW

    NEW

    View 22 items
    Activate Packages

    Activate Packages

    View 41 items
    Logger

    Logger

    View 9 items
    Activate Product Packages

    Activate Product Packages

    View 27 items