Dear All, I was wondering if anyone has any standard rules and policies which can be instantly deployed & added to Arcsight ESM for monitoring Windows, UNIX, database and network devices. I understand the rules vary and are specific to the OS and n/w devices. We have to setup the rules and commission Arcsight in our company. If anyone has prior hands-on using Arcsight or if you have any literature, please share. Also, if you have any docs on how to setup rules on Tripwire tool for file integrity checking please share the information. Thank you in advance.
V
