L2-WannaCry Malware Detection - Situational Awareness

181465

Micro Focus Micro Focus Community

App Support Tiers

MICRO FOCUS SUPPORTED

Support via Micro Focus Software Support, with a ticket filed against the associated product.

PARTNER

Micro Focus offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by Micro Focus of the Micro Focus community.

MICRO FOCUS COMMUNITY

Micro Focus Community Content is provided by Micro Focus for the benefit of customers, support for it is not available via Micro Focus Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by Micro Focus customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "CyberRes Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official Micro Focus/CyberRes product releases. Micro Focus has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. Micro Focus strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

Micro Focus | Micro Focus Community

This package is intended to detect WannaCry malware IOCs incidents and provide ArcSight context to them, using both the ArcSight Network and Asset Model to alert the SOC Analyst and Operator of potential WannaCry IOCs in critical hosts.

670 downloads

Description

This Package detects WannaCry malware IOCs incidents and provides ArcSight Content to them, allowing the SOC Analyst and Operator to identify WannaCry IOCs in high critical and DMZ assets in the internal network. This package requires configured L1-WannaCry Malware Detection - Indicators and Warnings package.

The following are some of the User Stories supported by this package:

Wannacry Known Destinatation Activity
Wannacry Known DNS Domain Activity
Wannacry Known File Activity in Host
Wannacry File Activity in Critical Host
Wannacry File Activity in DMZ Host
Wannacry Known Destination Activity from Critical Host
Wannacry known Destination Activity from DMZ Host
Wannacry known DNS Domain Activity from DMZ Host
Wannacry known DNS Domain Activity from Critical Host

Minimum Requirements

Activate Base - Version 2.5.0.0 and later.
L1-WannaCry Malware Detection - Indicators and Warnings

Releases

Release

Size

Date

L2-WannaCry Malware Detection - Situational Awareness 1.0.0.1

9.4 KB

Aug 14, 2018

More info Less info

Product compatibility

ESM

Version 6.8 · 6.11.0 · 6.9.1

Version 7.0 · 7.2 · 7.3 · 7.4 · 7.5 · 7.6

Release notes

Micro Focus rebranding changes.

Languages

English

Files

(9.4 KB)

L2-WannaCry Malware Detection - Situational Awareness 1.0.0.0

9.4 KB

May 22, 2017

More info Less info

Product compatibility

ESM

Version 6.8 · 6.11.0 · 6.9.1

Version 7.0 · 7.2 · 7.3 · 7.4 · 7.5 · 7.6

Release notes

Initial Release.

Languages

English

Files

(9.4 KB)

Resources

Documentation

Activate Wiki

ArcSight Activate framework

Activate License

Activate Installation and Configuration

Discussion Forum

CyberRes Marketplace

CyberRes Marketplace

L2-WannaCry Malware Detection - Situational Awareness

Product compatibility

CATEGORY

Description

Minimum Requirements

Releases

Resources

Sign in

CyberRes Marketplace

L2-WannaCry Malware Detection - Situational Awareness

App Support Tiers

Product compatibility

CATEGORY

Description

Minimum Requirements

Releases

Resources

Unsubscribe from notifications

Marketplace Terms of Service

Your download has begun