SN33: Catch Me If You Can

Document created by beleslie on Aug 25, 2011Last modified by beleslie on Jul 8, 2014
Version 4Show Document
  • View in full screen mode

Catch Me If You Can
Duc Ha, Senior Solutions Engineer, HP ArcSight and Raju Gottumukkala, ArcSight Expert, HP ArcSight
In this session you’ll learn how to build content for detecting unusual user and systems behaviors. Specifically, we’ll walk you through the process using two examples: Internet banking and system performance monitoring. Through these examples, you will learn advanced ArcSight ESM techniques for constructing behavior profiles of monitored subjects and detecting any deviance from those profiles.