SN52: All About Actors

Document created by jmerrill on Sep 10, 2010
Version 1Show Document
  • View in full screen mode

All About Actors
Anurag Singla, Software Development Manager, ArcSight
Level: Basic
Actors are representations of humans or agents in ArcSight ESM, and the actors feature links users and their activity to events from applications and network assets. This session will show how user information can be imported into ArcSight ESM from external identity management systems, and then correlated with security information in events. Also covered is how actors can be organized into various hierarchical models for use in identifying policy violations.