Sqrrl is an advanced detection and response platform that enables security analysts to uncover advanced threats and anomalies within enterprise networks. The Sqrrl platform enables security analysts to reduce attacker dwell time by discovering and assessing adversarial behavior faster and with fewer resources. The Sqrrl platform fuses HPE’s native ArcSight Data Platform data sources with other contextual data to generates an enterprise behavior graph, a unique visual environment for analyzing advanced adversarial behaviors across petabytes of data. Arcsight users will also benefit from Sqrrl’s kill chain-focused User and Entity Behavior Analytics (UEBA) which automatically uncover adversarial TTPs. Sqrrl’s machine learning-powered analytics provides greater context and focus to hunts, and combines with linked data techniques to present analysts with intuitive summaries and visualizations of threat actor behavior along the cyber kill chain. Features of the Sqrrl Threat Hunter Solution for HPE Arcsight include: Direct integration with the ArcSight Data Platform simplifies data sourcing Visual modeling of adversarial behaviors enriched with ESM user, asset, and event context Arcsight integration commands for launching Sqrrl hunts Native Arcsight content for consuming CEF-transported Sqrrl analytics Sqrrl's Threat Hunting Solution is the ideal tool for ArcSight analysts and hunters defending against today's advanced threats.

Suggested apps

Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.


Sqrrl Threat Hunting Solution- ArcSight Solution Brief 1.0
Jul 14, 2016
More info Less info
Product compatibility
Version 7.0
Release notes

ArcSight Solution Brief



Unsubscribe from notifications

You are receiving release updates for this item because you have subscribed to the following products:
If you unsubscribe, you will no longer receive any notifications for these products.
Tip: to update your subscription preferences, go to Manage Subscriptions from your Dashboard, uncheck the products you no longer want to receive notifications for, and click 'Save'.

Marketplace Terms of Service

In order to continue, you must accept the updated Marketplace Terms of Service
Since you are downloading an app from the OpenText Marketplace, you need to accept the updated Marketplace Terms of Service before you can continue. Use the link to review the Marketplace Terms of Service. Once complete check the, "I accept the Marketplace Terms of Service" box below and click accept to continue your download.

Your download has begun...

Your download has begun

Related content and resources

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2024-5-1-6172 | Mon Jun 24 04:52:54 PDT 2024