How to report false positive for ArcSight Threat Intelligence?

Sang Dang 7 months ago

Hi, we recently discovered that our website has been added to ArcSight Threat Intelligence's suspicious category using VirtusTotal tool, and tried to send a request to this email address: arcsight-virustotal@microfocus.com but so far nothing has changed. We would like to ask about a proper way to report false positive for our website.

Thank you.

Top Replies

Markus Sell 6 months ago in reply to Sang Dang +1 verified

Hi Sang, we triggered the needed investigation and your domain should be showing as good again. Can you please confirm and tag this thread accordingly? Thanks, MS

Parents

0 Markus Sell 7 months ago

Hi Sang,

Virustotal provides the process for reporting. Under normal circumstances my research team checks what comes through via this mail address. Can you provide the IP/URL in question here so i can bring it up with my team?

Thanks and sorry for the inconvenience.

MS

Sr. Product Line Manager | ArcSight Threat Intelligence
OpenText Cybersecurity
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Markus Sell 7 months ago

Hi Sang,

Virustotal provides the process for reporting. Under normal circumstances my research team checks what comes through via this mail address. Can you provide the IP/URL in question here so i can bring it up with my team?

Thanks and sorry for the inconvenience.

MS

Sr. Product Line Manager | ArcSight Threat Intelligence
OpenText Cybersecurity
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 Sang Dang 6 months ago in reply to Markus Sell

Hi Markus, thanks for your response. Our domain is `lakihelppi.com`, and if we need to contact please use my email address sang@lakihelppi.com.

Thanks again and have a nice day.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Menu

ArcSight Discussions

How to report false positive for ArcSight Threat Intelligence?

Top Replies

Resources