Health and Wellness Policy - Alerting on Uptime November 26, 2018 A recent customer question about alerting on Uptime values from the REST API got me digging into... Read More
Hunting in RDP Traffic November 12, 2018 I was just working in the NOC for HackFest 2018 in Quebec City (https://hackfest.ca/en/) and... Read More
Arcsight Compatible ESA Syslog Template November 8, 2018 A couple of clients have asked about a generic ESA template that can be used to alert into Arcsight... Read More
Running RSA NetWitness in Google Cloud November 6, 2018 As cloud deployments continue to gain popularity you may find the need for running the RSA... Read More
Version 11.2 PDF Archive and All-in-One PDF Now Available November 1, 2018 Hi Everyone, The PDF compilations for RSA NetWitness Platform (Logs & Network) Version 11.2 are now... Read More
Localized documents for Version 11.1 are available in RSA Link October 31, 2018 Localized documents that were updated for Version 11.1 are posted in RSA Link for customers who... Read More
What's on your wire: Doing more with GEOIP October 29, 2018 I was recently working with Eric Partington who asked if we could get the Autonomous System Numbers... Read More
v11.x - Adding DR Investigation NW Head Server October 25, 2018 Background Information: v10.6.x had a method in the UI to add a standalone NW head server for... Read More
MuddyWater APT Detection Using the RSA NetWitness Platform October 15, 2018 MuddyWater is an APT group who's targets have mainly been in the Middle East, such as the Kingdom... Read More
Sending logs from a remote VLC to a NATTED Log Decoder October 10, 2018 RSA Netwitness gives you the ability to use remote Virtual Log Collectors (VLC) to be able to... Read More