Hi Everyone ,
we are having some hashes to check in ESM. can anyone pls let me know Which field contains Hashes in Arcsight ?
or, any other solution for this.
Thanks for the reply , generally fileHash /old file hash field should capture the hashes
but we are having symentic device which capturing hashes in name field .
so i think it is device specific . however fireeye capture hashes in filehash field itself.