Your browser is not supported

For the best experience, use Google Chrome or Mozilla Firefox.


ArcSight Intelligence

ArcSight Intelligence empowers your security team to preempt elusive attacks. With contextually relevant insights from behavioral analytics, analysts can quickly zoom in on what truly matters in their battles against complex threats such as insider threats and advanced persistent threats (APT).

Find elusive, unknown threats

With unsupervised machine learning, ArcSight Intelligence measures “unique normal”—a digital fingerprint of each user or entity in your organization, which can be continuously compared to itself or peers. This approach to behavioral analytics enables your security teams to detect traditionally difficult-to-find threats, such as insider threats and APTs.

dots dots

Supercharged UEBA

The more context your team has, the faster they can mitigate a security incident. ArcSight Intelligence provides a contextualized view of the riskiest behaviors in your enterprise with supercharged UEBA and gives your SOC team the right tools to visualize and investigate threats before it’s too late.

bg bg

Cut through the noise

Anomaly detection algorithms that expect the same behavior from every entity create a flood of distracting false alerts. ArcSight Intelligence connects the dots between unusual behavior and real threats by using mathematical probability and unsupervised machine learning to more accurately identify the most suspicious entities.

bg bg

Boost SOC productivity

With more accurate and automated targeted attack and insider threat detection, SOC analysts can focus their time on investigating the threats that matter most via an intuitive user interface (UI) and comprehensive API. Dashboards, timelines, filtering, and search capabilities enable analysts to quickly refine data and logs down to the most relevant information.

bg bg

Respond before damage is done

With data breaches, time-to-response matters. ArcSight Intelligence’s threat detection capability software enables intuitive, contextualized detection and investigation. It enables SOC teams to initiate actions quickly via security orchestration and automation response (SOAR) solutions to begin remediation. ArcSight Intelligence also provides downloadable reports that summarize immediate risks.

bg bg
  • Made by threat hunters, for threat hunters

    With a user interface forged from years of experience from senior SOC analysts, ArcSight Intelligence provides you a prioritized list of threat leads determined by curated risk profiles of every user and entity on your network. Suspicious activities can then be investigated and evaluated for potential malicious use.

Related Resources

Related Products


ArcSight Enterprise Security Manager

Real-time threat detection, analysis, and response in a comprehensive SIEM solution.


ArcSight Recon

A comprehensive log management and security analytics solution that eases compliance burdens and accelerates forensic investigation.


ArcSight Intelligence for CrowdStrike

Combine rich CrowdStrike Falcon endpoint data with behavioral analytics to swiftly reveal hidden threats such as insider threats and APTs.

Try it today

Want to see ArcSight Intelligence for yourself? Request a demo to see how ArcSight Intelligence can focus and accelerate your SOC. You’ll discover how to enable your team with behavioral analytics to swiftly uncover elusive threats hidden in your enterprise.

release-rel-2022-6-2-hotfix-7662 | Thu Jun 30 00:48:29 PDT 2022
Thu Jun 30 00:48:29 PDT 2022