HP Protect 2011

Just got back from the annual ArcSight user conference.  They were bought by HP and the conference was called HP Protect 2011.  The conference was excellent as usual.  You get to hear from developers, support staff, consultants, and other customers.  My focus this year was attending sessions on performance tuning and using threat intelligence to enhance correlation.

I gave a presentation at the conference this year on using ArcSight ESM to catch malware that was not caught by anti-virus software.  My slide deck will be available on this site soon.  Thank you to everyone that attended the session.  It was a packed room.  I hope it was worth your time.  Any feedback is appreciated!