Each cyberattack has its indicators. Analysts have to search various indicator types in SIEM during global cyber-attack events. When indicators are still alive, companies have to create real-time rules. With ArcSight Threat Intelligence Platform, you don’t have to evaluate each indicator type for every cyber incident. It provides use case communication methodology. It is enough to detect a list of new attack indicators.