Services on NW 11.x Admin Server
January 18, 2018
Service Command Log File Location Purpose Admin Server service rsa-nw-admin-server restart ...
Upgrade to RSA NetWitness v11 & Maximize Your ROI by Investing in RSA Professional Services
January 18, 2018
Upgrade to RSA NetWitness Version 11 With RSA Professional Services: There are numerous reasons why...
Freemarker Tips & Tricks in NetWitness 11.x
January 17, 2018
If you have some custom alert templates that you've been using in NetWitness 10.6.x, you may find...
Feed - Windows Event ID Criticality
January 17, 2018
Discovered this list of windows Event ID's and their criticality from Microsoft. Appendix L -...
Malspam delivers Ursnif Banking Trojan 1-12-2018
January 16, 2018
Malspam was observed on January 12th 2018 delivering Ursnif (AKA Gozi). Ursnif is a Banking Trojan...
Malspam delivers njRAT 1-11-2018
January 12, 2018
During the last several weeks of 2017 and now well into early 2018, RSA FirstWatch has observed a...
Log - Parsing Cisco Umbrella
January 12, 2018
Interesting question from an internal resource about how to parse CSV files that contain...
Malspam delivers BITTER RAT 01-07-2018
January 10, 2018
Malspam activity was observed on January 7th 2018 delivering a new variant of BITTER Remote Access...
Malspam delivers FormBook InfoStealer 01-08-2018
January 9, 2018
Malspam activity was observed on January 8th 2018 delivering FormBook malware. FormBook is a data...
NetWitness 11.0 - HTTP_lua options
January 8, 2018
Highlighting some of the new features available in NW11 (NetWitness 11.0). HTTP Lua Parser Options