Collecting, monitoring, and analyzing audit logs in an external SIEM ArcSight.

Tiny, zero-dependency library to work with CEF (Common Event Format) format

Parse a raw Common Event Format (CEF) log message and show it in a tabular view

Microfocus ArcSight FlexConnector for Microsoft Sysmon tool

This script is a connector for Azure Network Watcher Logs which can be pushed to Logstash or ArcSight

The latest Cyber Security Career Opportunities with Airbus. Check out the Job Descriptions in the Wiki!

CEF Parser for Cisco Umbrella JSON API Logs

convert your JSON events to CEF format

This repository contain configurations files for Arcsight Flexconnector Regex file Type designed for Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)

Pre-check for ArcSight Logger before Installation

cybercure.ai python SDK to digest cybercure free cyber threat intelligence feeds

Go Package for ArcSight's Common Event Format (CEF)

FSISAC STIX Downloader is a script to pull FSISAC (STIX Version 1.1.1) from FSISAC Taxii Server. The main issue with FSISAC STIX feeds is it has IOCs written in all-text description and not in seperate XML nodes. The script will download and convert the STIX files to JSON files in local directory.

Syslog Parser. Accepts RFC 3164 (BSD) and RFC 5424 formats

Stuff related to arcsight.

Python library for the ArcSight logger REST API

ArcSight's Common Event Format library