HPE ArcSight
HPE Security ArcSight ESM is a comprehensive security information and event management solution that identifies and prioritizes threats in real time so you can respond and remediate quickly.
Key Features
-
Data Enrichment
Enriches the data with user and asset information, giving you the situational/content awareness you need to make informed decisions during the investigation and to accelerate the remediation process. -
Categorization and normalization
Categorization and normalization of data helps you quickly identify situations that require investigation or immediate action helping you focus your attention on most urgent, high-risk threats. -
Powerful real-time correlation
Improve incident response time from days to minutes with the most intelligent correlation engine in the industry. It filters out irrelevant noise while zeroing in on threats that matter most. -
Ultra-fast forensics
Rapidly search terabytes of data using a simple search interface. Enables needle-in-the-haystack queries of both active and historical data with a simple search interface. -
Workflow automation
Automatically or manually escalate events to the right people in the right time frame. The robust workflow framework comes with built in case management and can integrate with your existing systems. -
Out-of-the-box security use cases
Accelerate your SIEM deployment with a large library of predefined security use cases and compliance automation and reporting tools that are the cornerstone of building Security Operations.