Using MISP Threat Intelligence with ArcSight ESM скачать в хорошем качестве

Using MISP Threat Intelligence with ArcSight ESM

Originally posted on March 25, 2020 Part of the ArcSight How-To Video Series How to set up ArcSight ESM to use MISP as a threat intelligence feed. Learn what MISP does and how ArcSight uses it to improve the threat detection capabilities of your SOC. Finally, we offer a walk-through of how to install and configure MISP with ArcSight ESM. Presented by Steve Maxwell, ArcSight Technical Enablement WHAT IS MISP? The MISP platform enables cyber security teams to produce and consume threat intelligence data. More than 6000 organizations are currently using MISP and its lists of indicators of compromise (IOCs). MISP is also MITRE ATT&CK compatible... its IOCs are mapped to MITRE ATT&CK techniques to further enable SOC teams. Learn more at https://www.misp-project.org/