Customizing Rules to Work with ArcSight MITRE Package

209891

OpenText OpenText Community

App Support Tiers

OpenText SUPPORTED

Support via OpenText Software Support, with a ticket filed against the associated product.

PARTNER

OpenText offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by OpenText of the OpenText community.

OpenText COMMUNITY

OpenText Community Content is provided by OpenText for the benefit of customers, support for it is not available via OpenText Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by OpenText customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "Cybersecurity Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official OpenText/Cybersecurity product releases. OpenText has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. OpenText strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

OpenText | OpenText Community

How to customize your rules so it will work with the ArcSight MITRE ATT& CK content

1,473 downloads

Description

This document provides the steps needed for customizing your own rules so it will work with the ArcSight MITRE ATT&CK resources such as the dashboards, integration commands, reports, and active channels.

Suggested apps

FREE

New

OpenText COMMUNITY

Activate P-Imperva-SecureSphere (Obsolete)

OpenText

The Imperva SecureShpere Product package includes ArcSight ESM resources to work with Imperva SecureShpere reported events.

FREE

New

OpenText

Tenable Network Security Nessus

OpenText

This NetIQ Sentinel Collector provides data-capture capabilities for Tenable Nessus and related products.

FREE

New

Community

Burp Connector for WebInspect

Dylan Thomas

Integrate Burp with Fortify WebInspect

Playbook-Stolen-Lost Device

OpenText

A Playbook for Stolen/Lost Device Usecase

New

Community

Airlock WAF

Ergon Informatik AG

Airlock Suite deals with the issues of filtering and authentication in one complete and coordinated solution – setting standards for usability and services. Airlock Suite is protecting more than 30.000 back-ends and 15 million identities around the globe.

FREE

New

OpenText

Cisco Network Admission Control

OpenText

This Novell Sentinel Collector provides data-capture capabilities for Cisco Network Admission Control and related products.

FREE

New

OpenText

IBM DB2

OpenText

This Novell Sentinel Collector provides data-capture capabilities for IBM DB2 and related products.

FREE

New

OpenText COMMUNITY

Playbook-Access Attempt on Unidentified Protocol Ports

OpenText

A Playbook for Access Attempts on Unidentified Protocols and Ports Usecase

Which Tor

OpenText

An Integration command which check if IP address belongs to Tor or not

424

Releases

Release

Size

Date

Customizing Rules to Work with ArcSight MITRE Package v2

451.1 KB

Jun 11, 2020

More info Less info

Product compatibility

ArcSight ESM

Version 7.0 · 7.2 · 7.3 · 7.4 · 7.5 · 7.6 · 7.7 · 7.8

Release notes

Added more screenshots and clarifications.

Languages

English

Files

(451.1 KB)

Customizing rules so it will work with ArcSight MITRE Package v1

439.8 KB

Mar 4, 2020

More info Less info

Product compatibility

ArcSight ESM

Version 6.8 · 6.11.0 · 6.9.1

Version 7.0 · 7.2 · 7.3 · 7.4 · 7.5 · 7.6 · 7.7 · 7.8

Release notes

This document provides the steps for customize your own rules so it work with the ArcSight MITRE resources such as the dashboards, integration commands, reports, and active channels.

Languages

English

Files

(439.8 KB)

Marketplace

Marketplace

Customizing Rules to Work with ArcSight MITRE Package

Product compatibility

CATEGORY

Description

Suggested apps

Activate P-Imperva-SecureSphere (Obsolete)

Tenable Network Security Nessus

Burp Connector for WebInspect

Playbook-Stolen-Lost Device

Airlock WAF

Cisco Network Admission Control

IBM DB2

Playbook-Access Attempt on Unidentified Protocol Ports

Which Tor

Releases

Sign in

Marketplace

Customizing Rules to Work with ArcSight MITRE Package

App Support Tiers

Product compatibility

CATEGORY

Description

Suggested apps

Activate P-Imperva-SecureSphere (Obsolete)

Tenable Network Security Nessus

Burp Connector for WebInspect

Playbook-Stolen-Lost Device

Airlock WAF

Cisco Network Admission Control

IBM DB2

Playbook-Access Attempt on Unidentified Protocol Ports

Which Tor

Releases

Unsubscribe from notifications

Marketplace Terms of Service

Your download has begun