Quick Health-Check Script for NetWitness v.11.x
April 6, 2020
NetWitness already got the Health & Wellness service which provide a full overview for the health...
Zoom Meeting UNC Abuse and Detection with RSA NetWitness
April 2, 2020
With the sudden surge in popularity for Zoom meetings, an increase interest has been seen by...
Network Decoder Truncation Options
April 2, 2020
The ability to capture network events while keeping only the header portion and truncating the...
RSA IR - Best Practices for Organizations (A Starting Point)
April 1, 2020
1 Introduction The efforts of people around the globe have suddenly forced many workers to stay at...
Work From Home - The Paradigm Shift in Cyber Defense
April 1, 2020
INTRODUCTION By now, you may have already started to work from home instead of your usual...
Using RSA NetWitness to Detect HTTP Asynchronous Reverse Shell (HARS)
April 1, 2020
I recently reviewed HTTP Asynchronous Reverse Shell (HARS) for The C2 Matrix, which should be...
RSA IR - Recommendations for Users Working from Home
April 1, 2020
1 Introduction The efforts of people around the globe have suddenly forced many workers to stay at...
Profiling Attackers Series
April 1, 2020
I have recently been posting a number of blogs regarding the usage of the RSA NeWitness Platform to...
RSA NetWitness NW Server: Standby / Failover (Scenario 1)
March 31, 2020
https://community.rsa.com/docs/DOC-101877#Warm This video covers the following scenario: Scenario...
RSA NetWitness NW Server: Standby / Failover (Scenario 2)
March 31, 2020
https://community.rsa.com/docs/DOC-101877#Warm This video covers the following scenario: ...