Operationalizing Threat Aware Authentication April 29, 2020 Shout out to @Casey Switzer, @Josh Randall & @Larry Hammond. Without their help, the lab,... Read More
RSA NetWitness Storage Retention Script April 27, 2020 Although the RSA NetWitness platform gives administrators visibility into system metrics through... Read More
Custom Flat File Log Collection with NW-Endpoint 11.4 April 22, 2020 22APR2020 - UPDATE: Naushad Kasu has posted a video blog of this process and I have posted the... Read More
Maze Ransomware Detection with RSA NetWitness April 20, 2020 The Maze ransomware has recently been making the news due to some high-profile infections. In... Read More
Simple Overview of iDRAC and Health & Wellness April 14, 2020 RSA NetWitness Professional Services hosted a webinar covering the initial setup of an iDRAC... Read More
Microsoft 365, MS Threat Intelligence, Azure and Qualys Dashboards for RSA NetWitness Evolved SIEM April 10, 2020 Interested in having a central single pane of glass view across your cloud, on-prem and virtual... Read More
Custom File Blacklists in NWE 11.4.x and above April 6, 2020 Every SOC analyst should spend at least part of his/her day reading various blog posts and white... Read More
Zoom Meeting UNC Abuse and Detection with RSA NetWitness April 2, 2020 With the sudden surge in popularity for Zoom meetings, an increase interest has been seen by... Read More
RSA IR - Best Practices for Organizations (A Starting Point) April 1, 2020 1 Introduction The efforts of people around the globe have suddenly forced many workers to stay at... Read More
iDRAC 9 Configuration and Maintenance Guide March 24, 2020 Summary This guide was developed to consolidate most iDRAC related configuration and maintenance... Read More