Endgame

4870

Endgame Community

Endgame | Community

Endgame is the comprehensive endpoint security platform that prevents, detects, and responds to known and unknown threats at the earliest and all stages of the attack lifecycle. Endgame prevents breaches and transforms security analysts into Hunters.

1 reviews

96 downloads

Product compatibility

ArcSight

CATEGORY

Partner Integrations

Screenshots
Description
Suggested apps
Releases
Resources
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

Endgame has partnered with Micro Focus Security Arcsight to deliver advanced protection, centralized correlation, and comprehensive visibility. As the first comprehensive Indicators of Compromise (IOC)-independent endpoint security platform for Micro Focus Security ArcSight, Endgame hunts and detects unknown threats at the earliest stages of the kill chain. Once detected, organizations will have the ability to surgically remove threats, reducing the time, cost, and disruption associated with traditional incident response.

ENDGAME and Micro Focus ArcSight BENEFITS

Complete visibility and centralized monitoring across endpoint, network, and user behavior, enabling intelligent security operations.
IOC-independent prevention and detection of exploits, polymorphic malware, and advanced attacker techniques through Micro Focus certified ArcSight Common Event Format (CEF) alerts to enable comprehensive detection.
Automated real-time correlation and prioritization to accelerate incident triage and investigation.
Intuitive investigation and accelerated response through deep linking between Arcsight ESM and the Endgame platform.

Suggested apps

Web Application Security Framework

SOC Prime

The goal of Web Application Security Framework is to minimize risks related to the usage of publicly accessible web applications. The main business task of public web applications is to provide service access to as many people as possible.

SOC Prime SSL Framework for Arcsight

SOC Prime

SOC Prime SSL Framework combines the capabilities of Qualys SSL Labs and SIEM systems. As a result, this integration enables automatic tracking of the status of SSL certificates and web server security in the corporate domain.

Sysmon Framework

SOC Prime

Sysmon Framework is a set of rules and dashboards for the visualization of multiple security checks on Sysmon’s events on Windows hosts.

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

InQuest

InQuest

The InQuest platform focuses on capturing, identifying, processing, inspecting, and storing network content to detect and/or prevent malicious logic and/or sensitive information in transit.

Micro Focus COMMUNITY

Illusive Network

Micro Focus

This guide provides information for configuring the Illusive Networks integration for ArcSight ESM. This integration is supported on ESM versions [7.0] and later. Illusive version(s) 3.1 and above is supported.

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

EclecticIQ Platform Integration for Arcsight ESM

EclecticIQ

EclecticIQ Platform is a Threat Intelligence Platform that provides threat analysts, incident analysts, security analysts, fraud analysts, and risk analysts a comprehensive workspace for cyber threat management, analysis, and collaboration.

Releases

Release

Size

Date

Endgame MF ArcSight Guide v.1.0

722.2 KB

|

Aug 29, 2018

More info Less info

Product compatibility

ArcSight

Version 6.11

Version 7.0 · 7.2

Release notes

CEF Configuration Guide

Languages

English

Files

(722.2 KB)

Resources

Endgame

Endgame Solution Brief

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2021-5-1-4088 | Thu May 6 02:05:20 PDT 2021