Service Accounts Tracker

204774

SOC Prime Community

SOC Prime | Community

Service accounts is a necessary evil in every company of any size. Service accounts mostly unpersonalized, shared, privileged, with non expired passwords.

1 reviews

809 downloads

Product compatibility

ESM ESM Express

CATEGORY

Partner Integrations

Screenshots
Description
Requirements
Suggested apps
Releases
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

Service accounts is a necessary evil in every company of any size. Service accounts mostly unpersonalized, shared, privileged, with non expired passwords. This is a big challenge for any compliance. You can’t just prohibit service accounts operation, disable them or ignore this problem. And first step on the way of the situation improvement is to start tracking of Service accounts usage. You already have all necessary information for that in your SIEM. You just need to download and install “Service Accounts Tracker” Use Case that processes this information and visualize it in simple and actionable way.

Minimum Requirements

Any events which contain information about source or destination user names.

Suggested apps

Micro Focus COMMUNITY

G7 to G9 Migration Tool

Micro Focus

ESM Tool to migrate from a G7 appliance to G9

Incapsula for ArcSight

Imperva Incapsula

Incapsula ArcSight Integrator is an advanced security reporting and analysis tool that enables enterprises to effortlessly assimilate Incapsula’s security information into their ArcSight

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

IronTraps

IRONSCALES_

IronTraps - The Fastest, Fully Automated, Phishing Incident Response

Ransomware Hunter

SOC Prime

Ransomware Hunter natively integrates with ArcSight ESM and leverages statistical profiling and behavioral analysis methods, OSINT feeds including Ransomware Tracker by Abuse.ch and Detect Tor feed as well as strictly defined correlation rules.

SecurityBridge for SAP

ABAP-Experts - NCMI GmbH

SAP® is still a blind spot for the security monitoring teams in many organizations. SecurityBridge gives insight into suspicious activities occurring across your organization’s entire SAP landscape, enabling you to easily integrate SAP with HP ArcSight!

File Hash Analytics

SOC Prime

File Hash Analytics case works by tracking hashes of potentially harmful software, files and processes their start across the Company hosts. Also, use case allows you to track rare hashes, whether the same file names with different hashes.

EclecticIQ Platform Integration for Arcsight ESM

EclecticIQ

EclecticIQ Platform is a Threat Intelligence Platform that provides threat analysts, incident analysts, security analysts, fraud analysts and risk analysts a comprehensive workspace for cyber threat management, analysis and collaboration.

ThreatQ Integration for ArcSight ESM

ThreatQuotient

ThreatQis a threat intelligence platform that structures & normalizes intelligence data for proper deployment into ArcSight ESM. Control what information is exported from ThreatQ & ingested into ArcSight to extend alert capabilities.

Releases

Release

Size

Date

Service Accounts Tracker 1.0

491.6 KB

|

Oct 2, 2017

More info Less info

Product compatibility

ESM

Version 7.4 · 7.3 · 7.2 · 7.0

Version 6.9.1 · 6.11.0

ESM Express

Version 6.9.1

Release notes

Version 1.0

✓Initial version.

Languages

English

Files

(491.6 KB)

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2021-2-3-3805 | Wed Feb 24 23:06:24 PST 2021