Solution Flyer

ArcSight for Preemptive Threat Detection
Your security team is challenged with detecting and responding to elusive threats before thedamage is done. With ArcSight’s automated, proactive, and holistic SecOps solution, you canswiftly uncover known and unknown threats for effective preemptive threat detection.
The Timing Challenge

Preemptive Threat Detection at a Glance
What sets ArcSight products apart fromother solutions?
Layered Analytics
The ArcSight product line combines
intelligence from real-time correlation,
behavioral analysis, anomaly detection,
threat hunting and MITRE ATT&CK to focus
on the right threats before damage is done.
Combined Machine Learning
By bringing together multiple ML methods,
ArcSight products automate unique behavioral
monitoring and response with risk scores,
minimizing alert fatigue and false positives.
Unified Intelligence
ArcSight products unify threat intelligenceon a shared interface and storage platform
for scalable and comprehensive coverage ofknown and unknown threats.

Today, too many security teams are facedwith overwhelming alerts, and many of which
end up being false positives. These timeconsuming, false leads make it difficult foryour analysts to effectively detect, triage,and respond to real threats within yourenterprise in time. When your analysts are
overwhelmed and unable to spend theirvaluable time on real threats, you’ll likely beleft with a longer window of vulnerability for
attacks and high-cost data breaches. On topof this, many current tools employed by SOCs
are ineffective at detecting and responding
to both known and unknown threats in a
growing threat landscape. You need to focus
your SOC on collecting and deriving valuable
insights from mass amounts of threat
intelligence to find threats like insiders
and zero-days before it’s too late.

Preemptive Threat Detection

The ArcSight product line by OpenText’s
automated, proactive and holistic security
operations solution enables your SOC withlayered analytics and contextual threat
insights. With this, you can accelerate andfocus the efforts of your overburdened
analysts on the threats that matter withinyour entire threat landscape. This unified
SecOps solution empowers your team toaccurately prioritize threats and swiftly act
before damage is done.

Why the ArcSight Product Line?

Our unique layered analytics approachhelps SOCs efficiently detect and respondto known and unknown threats before
damage is done by seamlessly combining
contextual threat intelligence derived fromreal-time correlation, behavioral analytics,
and advanced threat hunting. Its intelligent
combination of machine learning helps tominimize alert fatigue and false positives
by identifying and prioritizing suspiciously
anomalous users and entities that may
indicate an insider threat or advanced
attack. These analytical methods with native
Archsight SOAR by OpenText capabilities
work together to proactively protect critical
data by accelerating the efforts of youranalysts. With a greater ability to focus
valuable time on the threats that matter, you
can ensure comprehensive coverage of yourgrowing threat landscape while streamlining
processes to speed up actions.

Features and Benefits

Combined Machine Learning: Your SOC
is likely overwhelmed with alerts and false
positives, wasting your analysts’ valuable timeand delaying response. The ArcSight productline combines supervised machine learningfrom ArcSight Recon by OpenText andunsupervised machine learning from ArcSight
Intelligence by OpenText to optimize yourSOC’s leads to focus analysts’ efforts on
the threats that matter most.
Security Orchestration and AutomatedRe­sponse: Acting quickly when facedwith a potential threat is critical for SOCs
to safeguard the enterprise. Our native
ArchSight SOAR capability enables youranalysts to act with speed by automating
repetitive tasks and initiating threat response.
Centralized User Interface: With fragmented
security tools running independently,
your analysts are unable to gain a holistic
view of your entire threat landscape,“Very Sophisticated Correlation Engine,which enables us for advanced threat readiness.
Gartner Peer Insight Review, 2020

Connect with Us
www.opentext.com

hindering swift threat detection and response.
The ArcSight product line’s ­centralized userinterface reduces “swivel-chair syndrome”
and wasted time so your analysts’ canaccurately find and react to threats with speed.
Unique Behavioral Baselines: Unknown
threats are extremely difficult to combat andeven harder to preemptively detect. ArcSightproducts identify unique baselines for allusers and entities within your enterprise touncover unusual and suspicious behaviors.
With accurate behavioral monitoring, you candetect hard-to-find, unknown threats such as
insider, zero-days, and APTs with additional
threat context to reduce false positives
and speed up detection time.
Custom Risk Scores: Your analysts are likely
wasting much of their time chasing down false
leads based on lack of context. The ArcSight
product line’s behavioral analytics capability
creates custom risk scores on your organiza­
tion’s users’ and entities’ activities. With thesecontextual risk scores that identify suspicious
users and entities, your analysts will have aprioritized list of threat leads to accelerate
SOC efforts and minimize alert fatigue
Continuous Unsupervised ML: ArcSight
products leverage continuous unsupervisedmachine learning to contextualize the threatsin your enterprise to reduce false positives.
With unsupervised ML, your analysts canprioritize leads and focus their time on
detecting critical threats before the damage
is done.

Learn more at
www.microfocus.com/en-us/cyberres/secops/arcsight-intelligence

Unified Platform: The security toolsemployed in your SOC need to be able toeffectively detect both known and unknown
threats to stop bad actors in their tracks. The
ArcSight product line provides end-to-end
security operations coverage delivered on asingle platform to quickly and accurately finddocumented and elusive threats before
it’s too late.
Holistic Threat Intelligence: Yourorganization is likely faced with mountains ofdata which your analysts need to sift throughto uncover threats, wasting precious time.The
ArcSight product line amalgamates threat
intelligence with unified data storage andanalysis through ArcSight Recon to provide
faster threat insights, boosting your SOC’s
detection andresponse times.
Identification of Known and Unknown
Threats: Accurately detecting both known
and unknown threats is key to stopping
attacks before they take place. ArcSight
products help you protect your organizationfrom community-known threats with real-timecorrelation and the unknowns with advanced
behavioral analytics.

OpenText Cybersecurity provides comprehensive security solutions for companies and partners of all sizes. From prevention, detection and response to recovery, investigation and compliance,
our unified end-to-end platform helps customers build cyber resilience via a holistic security portfolio. Powered by actionable insights from our real-time and contextual threat intelligence,
OpenText Cybersecurity customers benefit from high efficacy products, a compliant experience and simplified security to help manage business risk.
761-000029-003 | O | 10/23 | © 2023 Open Text