Is it possible to mask identity-related data in NetWitness Logs & Packets?
Issue
I want to obfuscate certain data within the RSA NetWitness Suite user interface in order to hide identity-related data, user data and personal identifiable information (PII) from my analysts and need to know if this is possible within the NetWitness Suite.
Resolution
It is possible for a data privacy officer or administrator to obfuscate privacy-sensitive data in RSA NetWitness Suite. This functionality was introduced in RSA Security Analytics 10.5 and is available in all subsequent versions including NetWitness Logs & Packets 11.x. & 12.xDetails on how to implement the functionality can be found within the Data Privacy Management Guide for the NetWitness Suite. Use the links below to access the appropriate guide for your version.
- Data Privacy Management Guide for 11.7
- Data Privacy Management Guide for 12.1
- Data Privacy Management Guide for 12.2
- Data Privacy Management Guide for 12.3
- Data Privacy Management Guide for 12.3.1
- Data Privacy Management Guide for 12.4
Notes
If you have any questions about implementing this functionality or experience any issues, please contact NetWitness Support or post a question on NetWitness Ideas and Suggestions.Support Numbers:
https://community.netwitness.com/t5/support-information/how-to-contact-netwitness-support/ta-p/563897#toc-hId--1428883006
Ideas and Suggestions:
https://community.netwitness.com/t5/community-ideas-suggestions/idb-p/community-ideas
Product Details
NetWitness Product Set: NetWitness Logs & PacketsNetWitness Product/Service Type: User Interface, Investigation, Packet Decoder, Log Decoder
NetWitness Version/Condition: 11.x, 12.x
Platform: CentOS, Alma Linux
Approval Reviewer Queue
Technical approval queue