The Threat and Impact Analysis package supports the Level 3 - Threat Refinement (in Activate terms, Level 3 - Impact and Threat Analysis). Here we track the events for attacker and targets, systems and entities, across the ArcSight Attack Life Cycle. We also track the states of systems and entities of interest. Finally, we track activity of systems based on activity seen by or affecting them across the attack life cycle or based on their state. In some cases, as with the use cases provided by this base package, the use cases and user stories are based on correlation events across multiple Defense Monitoring in Depth layers. Other L3 use cases are specific to a DMiD layer.
Similar apps are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.
Related content and resources
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox