Customers can then correlate the list of malicious IPs from Webroot with security events indexed by HPE ArcSight ESM to detect malicious IP activities in their incoming IP traffic. HPE ArcSight ESM alerts users to suspicious activities as they happen and the Webroot Threat Intelligence Platform is able to provide additional detailed contextual information on each malicious IP so that incident response teams can quickly investigate and remediate the most serious threats before they lead to costly data theft and loss. "According to ESG research, 27 percent of cybersecurity professionals working at enterprise organizations say that spending on their organizations' threat intelligence programs will increase significantly over the next 12 to 18 months," said Jon Oltsik, senior principal analyst, Enterprise Strategy Group.