arcsight

ArcSight's Common Event Format library

Python library for the ArcSight logger REST API

Syslog Parser. Accepts RFC 3164 (BSD) and RFC 5424 formats

Go Package for ArcSight's Common Event Format (CEF)

The latest Cyber Security Career Opportunities with Airbus. Check out the Job Descriptions in the Wiki!

Stuff related to arcsight.

Parse a raw Common Event Format (CEF) log message and show it in a tabular view

FSISAC STIX Downloader is a script to pull FSISAC (STIX Version 1.1.1) from FSISAC Taxii Server. The main issue with FSISAC STIX feeds is it has IOCs written in all-text description and not in seperate XML nodes. The script will download and convert the STIX files to JSON files in local directory.

Convert JSON logs, including Elastic Common Schema (ECS) events, to ArcSight CEF - Python package and streaming CLI with ECS auto-detection and vendor mappings

Zero-dependency SIEM log-streaming core for PHP: a normalized security-event value object and the formatters (Splunk HEC, Elastic ECS, ArcSight/syslog CEF, generic JSON) that turn it into what real SIEMs ingest. Framework-agnostic; the delivery/egress layer lives in the Laravel wrapper.

Collecting, monitoring, and analyzing audit logs in an external SIEM ArcSight.

CEF Parser for Cisco Umbrella JSON API Logs

Pre-check for ArcSight Logger before Installation

This repository contain configurations files for Arcsight Flexconnector Regex file Type designed for Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)

convert your JSON events to CEF format

Python package and CLI to convert syslog (RFC3164/RFC5424, rsyslog, journald) into ArcSight CEF, with mappings for Cisco ASA/IOS, F5, Linux, and VMware

Microfocus ArcSight FlexConnector for Microsoft Sysmon tool

This script is a connector for Azure Network Watcher Logs which can be pushed to Logstash or ArcSight

Tiny, zero-dependency library to work with CEF (Common Event Format) format