Activate P-McAfee ePO-EndpointSecurity (Obsolete)

197837

OpenText OpenText Community

App Support Tiers

OpenText SUPPORTED

Support via OpenText Software Support, with a ticket filed against the associated product.

PARTNER

OpenText offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by OpenText of the OpenText community.

OpenText COMMUNITY

OpenText Community Content is provided by OpenText for the benefit of customers, support for it is not available via OpenText Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by OpenText customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "Cybersecurity Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official OpenText/Cybersecurity product releases. OpenText has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. OpenText strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

OpenText | OpenText Community

Activate product package for McAfee ePO-EndpointSecurity, which has a lot of changes compared to the Virusscan package.

0 reviews

209 downloads

Product compatibility

ArcSight

CATEGORY

ArcSight | Obsolete Packages

Description
Requirements
Suggested apps
Releases
Resources
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

L1 Malware Monitoring User Stories L2 Malware Monitoring User Stories

This package covers McAfee Endpoint Security, a successor to Virusscan with different events. It includes these use cases in its filters:

Resolved Malware Events
Quarantined Malware Events
Unresolved Malware Events
Same Malware Infected Multiple Times a Host
Multiple Different Malware Infections in Host
Malware Outbreak ( per malware )
Malware Outbreak in Zone
Malware Outbreak in DMZ Zone
Same Malware Infected Multiple Times a Critical Host
Same Malware Infected Several Hosts in Zone
Same Malware Infected Several Hosts in DMZ Zone
Several Different Malware Infection detected in Critical Host
Several Different Malware Infection detected in DMZ Zone
Unresolved Malware on Critical Host
Unresolved Malware on DMZ Host

Minimum Requirements

Activate 2.5.4.0 or greater

Suggested apps

McAfee Vulnerability Manager

OpenText

This NetIQ Sentinel Collector provides data-capture capabilities for McAfee Vulnerability Manager and related products.

OpenText COMMUNITY

Playbook-Endpoint Investigation - Windows

OpenText

A Playbook for Endpoint Investigation on Windows Platforms

OpenText COMMUNITY

MITRE ATTACK Package for ArcSight Logger

OpenText

The Logger MITRE ATT&CK Package is a set of Logger Searches which let you hunt MITRE ATT&CK related activity.

OpenText COMMUNITY

Activate C-Security System Monitoring - AssetModel (Obs...

OpenText

Activate C-Security System Monitoring - AssetModel Keeps track of all assets modeled into the ESM. Keeps track of all devices (non-assets/unmodeled) reporting events into the ESM.

IBM Proventia Network Enterprise Scanner

OpenText

This Novell Sentinel Collector provides data-capture capabilities for IBM Proventia Network Enterprise Scanner and related products.

Process

OpenText

This Novell Sentinel Connector allows you to start external processes and capture the output from those processes.

OpenText COMMUNITY

Playbook-Check IP Reputation from Multiple Sources

OpenText

A Playbook for Check IP Reputation from Multiple Sources Usecase

OpenText COMMUNITY

Fortify BugTracker Utility

OpenText

FortifyBugTrackerUtility allows for submitting vulnerabilities from either Fortify on Demand (FoD) or Software Security Center (SSC) to various bug trackers and other external systems including ALM Octane, JIRA, Archer, and MS TFS.

Cisco Network Admission Control

OpenText

This Novell Sentinel Collector provides data-capture capabilities for Cisco Network Admission Control and related products.

Releases

Release

Size

Date

P-McAfee-EndpointSecurity initial release 1.0.0.0

16.5 KB

|

Feb 25, 2019

More info Less info

Product compatibility

ArcSight

Version 7.0 · 7.2

Release notes

This is the initial release of the package.

Languages

English

Files

(16.5 KB)

Resources

Activate License

Documentation

Activate Wiki

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2024-8-3-6225 | Wed Aug 28 17:13:31 PDT 2024