RSA Response to SolarWinds/FireEye Attacks December 18, 2020 As you’ve surely seen, a recently discovered supply chain attack has impacted numerous... Read More
FireEye Breach - Beyond the signatures December 11, 2020 I'm certain everyone reading this was just as shocked by the recent news about the FireEye breach... Read More
FireEye Breach - Implementing Countermeasures in RSA NetWitness December 9, 2020 What Happened On December 8th, 2020, FireEye announced that it had been the victim of a cyber... Read More
Expanded Coverage of Snort Rules October 23, 2020 RSA NetWitness Platform 11.5 has expanded support for Snort rules (also known as signatures) that... Read More
RSA NetWitness ESA / EPL Overview October 22, 2020 In this video we cover some ESA EPL alerting basics and cover the EPL TryOut tool to help us... Read More
Business Context Feed: Taxonomy September 25, 2020 A business what? A Business Context Feed is a feed that provides context about systems or data that... Read More
RSA NetWitness Evolved SIEM and Gartner SOC Visibility Triad September 3, 2020 Before I jump into explaining what is the relation between RSA NetWitness as an evolved SIEM and... Read More
Using a 3rd Party Certificate with Endpoint 11.4 - The Easy Way August 6, 2020 By default, NetWitness Endpoint 11.x creates a self-signed Certificate Authority during its initial... Read More