D3 Security

D3 Security


D3 Security

 HPE Security ArcSight ESM with the D3 Cyber Incident Response Platform integration provides incident responders with a centralized incident response and case management system for fast and efficient handling of incidents.

 Key Links

Partner Product
(link to SW Marketplace)

Security Product


Partner Documentation

D3 Cyber Incident Response Platform



HPE users wanting to take a closer look at a detected Cyber Security event can manually push that event into D3 right from the HPE interface. After a duplicate prevention check, all of the relevant data from the HPE event travels to D3 via the HPE API in JSON format. Users can then process with their assessment and response activities within the D3 platform. Additionally, Source and Destination IPs from any incoming HPE event will be automatically cross-referenced against the D3 database. Matching IPs will link the active incidents with past ones, providing useful context on historical patterns to the incident responder.

D3 Security Documentation




Some content on Community Tips & Information pages is not officially supported by Micro Focus. Please refer to our Terms of Use for more detail.
Top Contributors
Version history
Revision #:
1 of 1
Last update:
‎2017-06-23 16:48
Updated by:
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.