CSN10: Policing the Police

Document created by jmerrill on Sep 28, 2009Last modified by jmerrill on Jul 8, 2014
Version 2Show Document
  • View in full screen mode
Policing the Police
Speaker: Brett Kilroe, Global Network Security Engineering-Citi
Learn how to leverage ArcSight built-in functionality in order to monitor itself. This session will cover how to set up ArcSight so that it is easy to control and track what changes your ArcSight users are making to your ESM instance. Topics include user entitlement reporting–monitoring who has access to what in your ArcSight system; resource change reconciliation–monitoring what has been modified, when it was modified and by whom; user administration–monitoring user account creation, modification and deletion.
Level: Intermediate