Cybersecurity Cloud Marketplace

New

OpenText COMMUNITY

APFS Date-Added Decoder

OpenText

This script decodes the date-added timestamps present in the internal $Catalog file created by EnCase for APFS volumes.

1,078

New

Community

Sonatype for Fortify SSC

Sonatype

Gain a 360 degree view of your application security posture by combining SaST, DaST, and IaST findings in Fortify SSC with the world’s leading open-source security data from Sonatype.

1,089

New

OpenText COMMUNITY

Comprehensive Case Template

OpenText

This template may serve you as basis for your own specific template and includes many Bookmark folders for often encountered topics during your exams.

1,358

New

OpenText COMMUNITY

VSS Examiner

OpenText

Quickly and easily identify and preserve data of interest in Microsoft Windows volume shadow copies.

15,511

New

OpenText COMMUNITY

Fortify Security Assistant for Eclipse

OpenText

Real-time security results in the Eclipse IDE to help developers identify and remove software vulnerabilities as they code.

3,868

New

Community

ScreenConnect Authentication Bypass (CVE-2024-1709 and ...

CyRay.io

ScreenConnect Authentication Bypass Detection

45

New

OpenText COMMUNITY

Integration-Microsoft Defender Endpoint

OpenText

Microsoft Defender Endpoint Integration for ArcSight SOAR

134

New

OpenText COMMUNITY

Integration-Okta

OpenText

Okta Integration for ArcSight SOAR

73

New

Community

Endgame

Endgame

Endgame is the comprehensive endpoint security platform that prevents, detects, and responds to known and unknown threats at the earliest and all stages of the attack lifecycle. Endgame prevents breaches and transforms security analysts into Hunters.

104

New

OpenText COMMUNITY

Firewall Monitoring

OpenText

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

2,027

New

OpenText COMMUNITY

Brute Force Attack

OpenText

The Brute Force Attack use case uncovers and tracks, in real-time, attempts and confirmed attacks using a brute force technique on network assets and applications.

2,226

New

OpenText COMMUNITY

ESM Default Content

OpenText

ESM Default Content includes Security Threat Monitoring and Threat Intelligence Platform package. It includes resources for tracking more than 300 techniques and sub-techniques from the MITRE ATT&CK framework.

8,236

New

OpenText COMMUNITY

ArcSight Classic MSSP Program Usage Reports

OpenText

The ArcSight Classic MSSP Usage Report package provides usage reporting for the Classic MSSP Pay-Per-Use license.

730

New

OpenText COMMUNITY

Fortify Jenkins Plugin (On-Premise)

OpenText

The Fortify plugin for Jenkins.

596

New

Community

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

1,633

New

OpenText COMMUNITY

ArcSight ESM and SOAR Integration Content

OpenText

ArcSight ESM content to integrate with ArcSight SOAR.

1,062
New

Partner

ADD User in AD group

RAH Infotech

This playbook provides a structured approach to ADD User in AD group ensuring proper validation before taking any action. It enhances security by integrating manual approvals with automated enforcement in Active Directory and ArcSight SOAR.

7

New

Partner

Disable User on AD

RAH Infotech

This playbook is designed to disable a user account in Microsoft Active Directory (AD)

3

New

Partner

Add IP to the Block List on Palo Alto Panorama Firewall...

RAH Infotech

This playbook is designed to help analysts manually block an IP address on the Palo Alto Panorama Firewall.

5

New

Partner

File Metadata Change Detected

RAH Infotech

This playbook responds to alerts indicating suspicious file metadata changes, such as renaming, moving, or modifying timestamps of files — a common behavior in insider threat scenarios or unauthorized activity.

3

New

Partner

Compromised Credentials - Response Playbook

RAH Infotech

This playbook automates the response to incidents involving compromised user credentials. It uses enrichment from ArcSight Intelligence and Microsoft Active Directory (AD) to gather user context, sends notification emails.

8

New

Partner

Data Exfiltration (Large File Transfer) - Playbook

RAH Infotech

This playbook is designed to detect and respond to potential data exfiltration incidents involving large file transfers.

7

New

Partner

Add IP in the block list of Fortinet Firewall

RAH Infotech

This playbook is designed to manually block a user’s IP in the firewall based on reputation analysis and an analyst decision.

11

New

Partner

Bruteforce Login Attempts-Response Playbook

RAH Infotech

This playbook is designed to respond to incidents involving brute-force login attempts.

6

New

Partner

Lateral Movement Detected-Response Playbook

RAH Infotech

This playbook automates the response to potential lateral movement activity within an enterprise environment.

5

New

Partner

Initial Access-Response Playbook

RAH Infotech

This playbook is designed to respond to Initial Access detection incidents—such as unauthorized logins or unusual account behavior.

3

New

Partner

Credential Access-Response Playbook

RAH Infotech

This playbook is triggered when suspicious or unauthorized credential access activity is detected.

6

New

Partner

Discovery-Response Playbook

RAH Infotech

This playbook is designed to handle alerts related to Discovery techniques (such as reconnaissance or internal scanning), typically observed in the early stages of a cyberattack. The workflow includes contextual enrichment, analyst decision, and automation

6

New

Partner

Anydesk Connected on a Server-Response Playbook

RAH Infotech

This playbook is triggered when Anydesk remote access software is detected on a server.

3

New

Partner

RDP Traffic Detected from Same Source to Multiple Desti...

RAH Infotech

This playbook responds to suspicious RDP activity where the same source IP connects to multiple destinations, a common sign of lateral movement or automated brute-force attempts.

3

New

Partner

EnCase Endpoint Snapshot Creation - Manual Playbook

RAH Infotech

This playbook is designed to automate the process of creating a snapshot on an endpoint using EnCase Endpoint Security, followed by a notification via SMTP Mail Server.

4

New

Partner

Isolate Endpoint on EnCase Endpoint Security - Response...

RAH Infotech

This playbook is used to quickly isolate an endpoint from the network using EnCase Endpoint Security.

1
New

OpenText COMMUNITY

Cybersecurity checksum

OpenText

Test app for checksum

0

New

OpenText COMMUNITY

ESM Default Content

OpenText

ESM Default Content includes Security Threat Monitoring and Threat Intelligence Platform package. It includes resources for tracking more than 300 techniques and sub-techniques from the MITRE ATT&CK framework.

8,236

New

OpenText COMMUNITY

Plist Parser

OpenText

This EnScript allows the examiner to bookmark and parse multiple Apple property-list (plist) files.

8,429

New

OpenText COMMUNITY

Plist Viewer Plugin

OpenText

Use an extended context-menu option to bookmark, decode and extract data contained in Apple property list (.plist) files; automatically view plist files embedded in other plist files.

9,644

New

OpenText COMMUNITY

APFS Date-Added Decoder

OpenText

This script decodes the date-added timestamps present in the internal $Catalog file created by EnCase for APFS volumes.

1,078
New

OpenText COMMUNITY

ESM Default Content

OpenText

ESM Default Content includes Security Threat Monitoring and Threat Intelligence Platform package. It includes resources for tracking more than 300 techniques and sub-techniques from the MITRE ATT&CK framework.

8,236

New

Community

Sonatype for Fortify SSC

Sonatype

Gain a 360 degree view of your application security posture by combining SaST, DaST, and IaST findings in Fortify SSC with the world’s leading open-source security data from Sonatype.

1,089

New

OpenText

ArcSight SmartConnector Parser Update

OpenText

Monthly SmartConnector Parser Release

13,480

New

Early Access

Integration-SMAX

OpenText

SMAX Integration for ArcSight SOAR

54

New

OpenText COMMUNITY

Playbook-Phishing Email

OpenText

A Playbook for Phishing Email Usecase

400

New

OpenText

Syslog

OpenText

This Connector allows you to receive data from Syslog event sources and collect generated events.

532

New

OpenText COMMUNITY

Client Login Extension

OpenText

The Client Login Extension (CLE) facilitates password self-service by adding a Forgot Password link to the SSPR login clients. This feature assists in reducing help desk calls from people who forget their passwords.

600

New

OpenText COMMUNITY

Integration-CyberRes Galaxy Threat Accelerator Program

OpenText

CyberRes Galaxy Threat Accelerator Program Integration for ArcSight SOAR

189

New

OpenText COMMUNITY

Brute Force Attack

OpenText

The Brute Force Attack use case uncovers and tracks, in real-time, attempts and confirmed attacks using a brute force technique on network assets and applications.

2,226

New

OpenText COMMUNITY

MITRE ATTACK Package for ArcSight Logger

OpenText

The Logger MITRE ATT&CK Package is a set of Logger Searches which let you hunt MITRE ATT&CK related activity.

816

New

Community

Microsoft Sysmon FlexConnector

Kevin Q

FlexConnector for the extraction and categorization of the “Microsoft-Windows-Sysmon/Operational” Windows Event Log using Microfocus ArcSight Windows Native SmartConnector Updated for Sysmon V 10.x

1,251

New

OpenText COMMUNITY

ArcSight ESM and SOAR Integration Content

OpenText

ArcSight ESM content to integrate with ArcSight SOAR.

1,062

New

Partner

Cisco Firepower (eStreamer and eNcore)

Cisco

Cisco Firepower Management Center Integration with ArcSight

2,011

New

OpenText

Threat Intelligence

OpenText

The Threat Intelligence Solution Pack provides a control-based framework to provide insight on vulnerabilities and exploits that may occur in the network.

185

New

OpenText

Universal Common Event Format

OpenText

The Universal CEF Collector provides data-capture capabilities from devices that sends events in Common Event Format (CEF).

533

New

Partner

ForeScout-ArcSight Joint Integration Solution Brief

ForeScout

Improve real-time visibility over managed and unmanaged devices while automating network access control and threat response.

354
ArcSight

View 229 items

EnCase

View 240 items

Fortify

View 10 items

NetIQ

View 1 item

Sentinel

View 171 items

Partner Integrations

View 89 items

Products

View 10 items

Resource Center

View 13 items

News & more

Cybersecurity Cloud Acquires Debricked

Debricked is a developer-centric open source intelligence company that enables speed and innovation for organizations seeking to secure their software supply chain. The company's vision of how developers evaluate, consume, and secure open-source components customized to their organization’s need, make Debricked an extremely valuable addition to Cybersecurity application security portfolio.

Learn More

Gartner Recognizes Fortify

Fortify's portfolio has been recognized as a Leader in the 2022 Gartner Magic Quadrant for Application Security Testing (AST) report. This marks the ninth consecutive time Gartner has recognized the the Fortify product line in its influential industry report. Fortify brings holistic security and visibility to developers, AppSec professionals and key stakeholders with its automated integrations.

Learn More

Cybersecurity Cloud Partners with Oregon Systems

Cybersecurity Cloud has formed a strategic partnership with Oregon Systems, the leading distributor of operational technology in the Middle East. With the collaboration agreement, Oregon Systems, with its extensive channel network and technical teams, will work closely with vendor expert teams to explore new opportunities and generate more brand awareness for Cybersecurity.

Read Article

Sign in

Marketplace

0

Welcome to the Cybersecurity Cloud Marketplace

APFS Date-Added Decoder

Sonatype for Fortify SSC

Comprehensive Case Template

VSS Examiner

Fortify Security Assistant for Eclipse

ScreenConnect Authentication Bypass (CVE-2024-1709 and ...

Integration-Microsoft Defender Endpoint

Integration-Okta

Endgame

Firewall Monitoring

Brute Force Attack

ESM Default Content

ArcSight Classic MSSP Program Usage Reports

Fortify Jenkins Plugin (On-Premise)

Palo Alto Networks Next-Generation Firewalls

ArcSight ESM and SOAR Integration Content

ADD User in AD group

Disable User on AD

Add IP to the Block List on Palo Alto Panorama Firewall...

File Metadata Change Detected

Compromised Credentials - Response Playbook

Data Exfiltration (Large File Transfer) - Playbook

Add IP in the block list of Fortinet Firewall

Bruteforce Login Attempts-Response Playbook

Lateral Movement Detected-Response Playbook

Initial Access-Response Playbook

Credential Access-Response Playbook

Discovery-Response Playbook

Anydesk Connected on a Server-Response Playbook

RDP Traffic Detected from Same Source to Multiple Desti...

EnCase Endpoint Snapshot Creation - Manual Playbook

Isolate Endpoint on EnCase Endpoint Security - Response...

Cybersecurity checksum

ESM Default Content

Plist Parser

Plist Viewer Plugin

APFS Date-Added Decoder

ESM Default Content

Sonatype for Fortify SSC

ArcSight SmartConnector Parser Update

Integration-SMAX

Playbook-Phishing Email

Syslog

Client Login Extension

Integration-CyberRes Galaxy Threat Accelerator Program

Brute Force Attack

MITRE ATTACK Package for ArcSight Logger

Microsoft Sysmon FlexConnector

ArcSight ESM and SOAR Integration Content

Cisco Firepower (eStreamer and eNcore)

Threat Intelligence

Universal Common Event Format

ForeScout-ArcSight Joint Integration Solution Brief

ArcSight

EnCase

Fortify

NetIQ

Sentinel

Partner Integrations

Products

Resource Center

News & more

Cybersecurity Cloud Acquires Debricked

Gartner Recognizes Fortify

Cybersecurity Cloud Partners with Oregon Systems

Want to Contribute to the Cybersecurity Cloud Marketplace?

Sign up now, or contact us for more information.