Insider Threat Solutions
ArcSight ESM and the Insider Threat Package acts as an early warning system designed to detect suspicious activity, such as printing large numbers of files outside of business hours, emailing large attachments to personal email accounts, employee communication with competitors or the clearing system audit logs to cover up one's tracks. In addition to the early warning system, the Insider Threat package also includes information leak and IT sabotage-specific detection capabilities such as real-time rules designed to identify inappropriate access or transmission of sensitive data, or internal use and presence of hacking tools.
Podcasts
- Hot Seat: Insider Threat Video
Network World, September 2006 <download now> - Identifying Insider Threats
Sploitcast, July 2006 <download now> - The Enemy Within
ZDnet, June 2006 <download or listen now> - ArcSight & Intrusic--An Insider Threat Primer
May 2006 <download now>
