ArcSight智能事件关联与全景分析攻略.pptVIP

ArcSightCorrelation;ArcSightESM

;ArcSightESM

;ArcSightESM

;ArcSightESM

;SOC中日志关联分析的核心技术

;;;ArcSightSmartAgent–Overview智能代理;ArcSightSmartAgent-EventNormalizationandCategorization事件规范化和分类;ArcSightSmartAgent–GuaranteedDelivery

智能代理—确保交付;TheArcSightManager-Overview;;ArcSightRiskCorrelation风险相关性;AssetLinkageandPriorityScoring-Overview

资产联动和优先评分-概述;AssetLinkageandPriorityScoring–InformationFlow资产联动和优先评分-信息流;ThreatPriority–VariablesConsidered

威胁优先–各种关系组合考虑;RelevancedragsdowntheAgentSeverity.相关性

Example: IfRelevance=0,thePriority=0

IfRele