HP ArcSight IdentityView 2.5: Enhanced Capabilities Against Insider Threats

Summary:

This document highlights HP's ArcSight IdentityView 2.5, a software that aims to detect insider threats by leveraging identity intelligence. Key features include monitoring high-risk users, generating user access reports for certification, and integrating with third-party partners for directory systems. Version 2.5 introduces support for up to 500,000 actors, performance improvements, configurable settings for multiple domains, flexible data handling from CSV files, changes in server room access policies, and an investigation into unauthorized activity detection through the software's features. The document emphasizes the software's adaptability to new security challenges and its ability to manage identities across various domains more effectively.

Details:

"IdentityView 2.5: bigger and better at fighting the insider threats" discusses how HP's ArcSight IdentityView can help identify potential insider threats within an organization by leveraging identity intelligence. The document outlines various use cases, such as monitoring high-risk users accessing sensitive systems, generating user access reports for certification, and utilizing third-party partners to integrate directory systems. These features are designed to enhance the detection of unauthorized activities and comply with audit requirements. This document from Hewlett-Packard Development Company discusses improvements and features in version 2.5 of IdentityView software. Key enhancements include support for up to 500,000 actors, performance testing with 25k EPS (events per second), configurable authenticator settings for multiple domains, a configurable account specifier for defining accounts using different properties, and flexible CSV support for reading identity information from CSV files. Additionally, the document outlines changes in server room access policies and mentions an investigation into unauthorized activity detected through IdentityView's features. The software is designed to adapt to new security challenges and provide better support for managing identities across various domains.

Disclaimer:

The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.