WUC Parser Overrides

240

Micro Focus Micro Focus Community

Micro Focus | Micro Focus Community

Various overrides for the WUC

2 reviews

312 downloads

Product compatibility

ArcSight

CATEGORY

ArcSight | ArcSight FlexConnectors

Description
Suggested apps
Releases
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

Various overrides for the WUC: Windows 2008: Add or update keymaps for events 299, 500, 501, 4688, 5156, and 5145 Windows 2008 FCP version 1: Add failure status and sub status for event 4625 Add parsing for ADFS events 299, 500, 501 Parse out event 5145 further Windows 2008 FCP version 1: Add failure status and sub status for event 4625

Suggested apps

Micro Focus COMMUNITY

Activate P-Snort

Micro Focus

This product-specific package includes the resources that support the Perimeter and Network Monitoring use case categories. Install this package if you collect Snort or Sourcefire logs for your ESM.

Micro Focus COMMUNITY

Firewall Monitoring

Micro Focus

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

Micro Focus COMMUNITY

ESM Default Content

Micro Focus

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT& CK framework.

Micro Focus COMMUNITY

Brute Force Attack

Micro Focus

The Brute Force Attack use case uncovers and tracks, in real-time, attempts and confirmed attacks using a brute force technique on network assets and applications.

Micro Focus COMMUNITY

Activate Base

Micro Focus

ArcSight Activate is a modular content development method designed to quickly deploy actionable use cases. The framework will unify our development methodology, allowing us to create portable content packages.

Micro Focus COMMUNITY

IPv4 Internet Dark Zones Update

Micro Focus

The Zone Update package provides periodic updates to IPv4 address allocations and dark space information for ESM.

Micro Focus COMMUNITY

Anomalous Traffic Detection

Micro Focus

The Anomalous Traffic Detection use case helps you identify sudden spikes in network traffic so that you can detect potentially malicious activity. Sudden spikes in traffic can be caused by scheduled backups or virus scanner updates inside your LAN.

Micro Focus COMMUNITY

IDS IPS Monitoring Package

Micro Focus

The IDS - IPS Monitoring use case provides an overview of the activity identified by the Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) on your network

Microsoft Sysmon FlexConnector

Kevin Q

FlexConnector for the extraction and categorization of the “Microsoft-Windows-Sysmon/Operational” Windows Event Log using Microfocus ArcSight Windows Native SmartConnector Updated for Sysmon V 10.x

Releases

Release

Size

Date

WUC_overrides.zip 1.0

2.9 KB

|

Jul 26, 2016

More info Less info

Product compatibility

ArcSight

Version 6.11

Version 7.0 · 7.2

Release notes

WUC Parser Overrides

Languages

English

Files

(2.9 KB)

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2021-5-1-4088 | Thu May 6 02:05:20 PDT 2021