Using MISP Threat Intelligence with ArcSight ESM
Originally posted on March 25, 2020
Part of the ArcSight How-To Video Series
How to set up ArcSight ESM to use MISP as a threat intelligence feed. Learn what MISP does and how ArcSight uses it to improve the threat detection capabilities of your SOC. Finally, we offer a walk-through of how to install and configure MISP with ArcSight ESM. Presented by Steve Maxwell, ArcSight Technical Enablement WHAT IS MISP? The MISP platform enables cyber security teams to produce and consume threat intelligence data. More than 6000 organizations are currently using MISP and its lists of indicators of compromise (IOCs). MISP is also MITRE ATT&CK compatible... its IOCs are mapped to MITRE ATT&CK techniques to further enable SOC teams.
Learn more at https://www.misp-project.org/
Watch video Using MISP Threat Intelligence with ArcSight ESM online without registration, duration hours minute second in high quality. This video was added by user ArcSight Unplugged 08 February 2021, don't forget to share it with your friends and acquaintances, it has been viewed on our site 1,094 once and liked it 10 people.