ObserveIT is ArcSight CEF Certified, so you can automatically integrate ObserveIT session recording with log data.
- Enhance ArcSight logs with user-specific metadata to gain rich context about insider threats
- Correlate ArcSight log data with user activity data to see what happened before, during, and after an incident
- Turnkey integration
- CEF certified: ArcSight users can automatically include ObserveIT session recording with pre-configured connectors
- ArcSight console displays detailed lists of user actions, including applications run, files touched, titles of windows opened, and more
- Any action can be launched to replay session