All About Actors
Speaker: Anurag Singla, Software Development Manager, ArcSight
Actors are representations of humans or agents in ArcSight ESM, and the actors feature links users and their activity to events from applications and network assets. This session will show how user information can be imported into ArcSight ESM from external identity management systems, and then correlated with security information in events. Also covered is how actors can be organized into various hierarchical models for use in identifying policy violations.