NetWitness Endpoint Configuration

Summary NetWitness Endpoint Configuration

This section of the documentation consists of the following topics:

• NetWitness Endpoint Overview
• Agent Modes
• Endpoint Server Configuration
• Deploy Endpoint Application Rules and ESA Correlation Rules
• Setup Meta Forwarding to Log Decoder
• Endpoint Sources
• Create Groups and Policies
• Manage Groups
• Manage Policies
• Change Policy Ordering for Groups
• Configure Data Retention Policy
• Manage Role Permissions at Endpoint Server Level
• Manage Inactive Agents
• Configure Retention Policy for Memory Dumps and MFT
• (Optional) Installing and Configuring Relay Server
• Endpoint YARA Rules
• Configure OPSWAT
• Integrate NetWitness Endpoint 4.4.0.2 or Later with NetWitness Endpoint 11.3
• Endpoint References
• Troubleshooting
• Appendices