Contributed a review of ArcSight Enterprise Security Manager (ESM): By tweaking use case conditions one could identify potential security breaches, but admin is complex