Welcome to the NetWitness Platform Training

Free Training

  • Introduction to the NetWitness Platform
  • NetWitness Platform 12: What’s New
  • NetWitness Webinars

Test your Knowledge

  • NetWitness Platform Assessment

Foundation Training

  • NetWitness Platform Foundations
  • NetWitness Platform ESA Fundamentals
  • NetWitness Endpoint Foundations

Administrator Training

  • NetWitness Platform Administration I
  • NetWitness Platform Administration II

Analyst Training

  • NetWitness Platform Analysis
  • NetWitness Platform Introduction to Hunting

Continuous Learning

  • NetWitness Platform ESA EPL Rules
  • NetWitness Platform Hunting Challenge
  • Extra Week – Virtual Lab Extension

Certification Program

  • NetWitness Associate Certification
  • NetWitness Specialist Administrator Certification
  • NetWitness Specialist Analyst Certification

On-Demand Subscriptions

  • NetWitness Platform Subscription
  • NetWitness Administrator Subscription
  • NetWitness Analyst Subscription
Free Training

Introduction to the NetWitness Platform

This training includes role and fundamental concepts of the RSA NetWitness Platform. Threat visibility and analysis capabilities available via such tools as email reconstruction, event and file analysis, and meta keys are discussed, as well as basic architecture and data flow. Another section demonstrates the Platform in action when drawing data from infrastructure logs, network packet capture, and endpoint monitoring.

Cost: Free

On-Demand (Self-Paced)

NetWitness Platform 12: What’s New

This FREE on-demand learning provides an overview of the new features and enhancements available in NetWitness Platform version 12.

Cost: Free

On-Demand (Self-Paced)

NetWitness Webinars

These FREE Webinars are available in live sessions and on-demand.

Cost: Free

Virtual Live Instructor Led Training

On-Demand (Self-Paced)

Test your Knowledge

NetWitness Platform Assessment

This FREE assessment is for learners who want to test their level in using the NetWitness Platform, what are their strength points and development areas.

Cost: Free

On-Demand (Self-Paced)

Foundation Training

NetWitness Platform Foundations

This course covers NetWitness Platform architecture, data flow, core and enhanced components, metadata concepts, rules, investigation techniques including queries, filtering and pivoting, along with reporting, alerting and incident management. Overviews of Endpoint Insights, Advanced Endpoint, UEBA and NetWitness Orchestrator are also provided. Students will gain insights into using the major features of the platform through a combination of lecture and demonstration, as well as practical hands-on exercises that reinforce the concepts.

Cost: $3,638.25 USD |or| Training Credits: 3,000

Virtual Live Instructor Led Training

On-Demand (Self-Paced)

NetWitness Platform ESA Fundamentals

This FREE on-demand learning provides an overview of the new features and enhancements available in NetWitness Platform version 12.

Cost: $225 USD |or| Training Credits: 200

On-Demand (Self-Paced)

NetWitness Endpoint Foundations

This 2-day course consists of lecture/discussion and lab exercises intended for lay the foundations of your understanding of NetWitness Endpoint. Intended audience is anyone performing security monitoring, hunting, and analysis with NetWitness Endpoint; anyone serving as admin or content creator for NetWitness Endpoint will also benefit. It supplements the NetWitness Platform Foundations and NetWitness Admin I courses.

Cost: $2,425.50 USD |or| Training Credits: 2,000

Private Instructor Led Training

On-Demand (Self-Paced)

Administrator Training

NetWitness Platform Administration I

This classroom-based course provides an overview of essential administrative tasks that are performed in order to get the RSA NetWitness Platform up and running. Students gain insight into configuring hosts and services and managing users within RSA NetWitness Platform and gain practical experience by performing a series of hands-on labs.

Cost: $2,425.50 USD |or| Training Credits: 2,000

Virtual Live Instructor Led Training

On-Demand (Self-Paced)

NetWitness Platform Administration II

This classroom training provides students with the knowledge and skills related to the administration and operation of the RSA NetWitness Platform. Topics covered include NetWitness Platform Services, Health and Wellness, Event Source Monitoring, backup and recovery, and administration tools for monitoring and troubleshooting the NetWitness platform. Students will gain practical experience by performing a series of hands-on labs.

Cost: $2,425.50 USD |or| Training Credits: 2,000

Virtual Live Instructor Led Training

On-Demand (Self-Paced)

Analyst Training

NetWitness Platform Analysis

This training provides hands-on experience using the RSA NetWitness Platform to investigate and remediate security incidents. The course consists of about 50% hands-on lab exercises, following a practical methodology from the incident queue through investigation, event reconstruction, damage assessment, and documentation using real-world use cases. Please choose the training course and version below for detailed information and to register.

Cost: $2,425.50 USD |or| Training Credits: 2,000

Virtual Live Instructor Led Training

On-Demand (Self-Paced)

NetWitness Platform Introduction to Hunting

This training provides an overview of threat hunting and covers hunting tools, content and methodologies that can be used to proactively find suspicious behavior. Students will apply the techniques acquired in this course to identify anomalies and find threats in the environment using Packets, Logs, and Endpoint. Please choose the training course and version below for detailed information and to register.

Cost: $2,425.50 USD |or| Training Credits: 2,000

Virtual Live Instructor Led Training

On-Demand (Self-Paced)

Continuous Learning

NetWitness Platform ESA EPL Rules

This on-demand learning identifies a best practice strategy for creating EPL rules as well as for learning the EPL rule syntax. It uses examples and use cases to illustrate EPL rule concepts, such as streams, constructs, data windows and time constraints.

Cost: $220 USD |or| Training Credits: 200

On-Demand

NetWitness Platform Hunting Challenge

This private group Instructor-led class gives the students the opportunity to hunt for adversaries in a realistic environment with real-time attacks happening during the class. Students will be provided with several complex, multipart cyberattack use cases to work through, and will be tasked with finding key evidence about the attack, identifying targeted and compromised systems, reconstructing the sequence of events, and proposing a remediation plan. Students also will compete against each other to collect points through their investigation and by answering questions. They can also get hints that will cost them points from their overall score. Students will be given a minimal amount of introductory information and will conduct their analyses using their knowledge of networking protocols, endpoint operating systems, and common cyber-attack vectors.

Cost: $18,191.25 USD |or| Training Credits: 15,000

Private Instructor Led Training

Extra Week – Virtual Lab Extension

Extra one week/10 hours of virtual lab time per person. Follow instructions to request an extension to your existing (active) lab environment. If your lab session has expired or run time has ended, a new environment will be provisioned. Once an environment has expired or run time has ended, all previous work will be lost.

Cost: $606.38 USD |or| Training Credits: 500

On-Demand Lab

Certification Program

NetWitness Associate Certification

The NetWitness Associate certification reflects the fundamental knowledge required of both the analysts using the NetWitness Platform product and the administrators managing it. This certification is the prerequisite for the next-level NW Specialist certification exams.

Cost: $133.40 USD |or| Training Credits: 120

On-Demand (Web-Based)

NetWitness Specialist Administrator Certification

This certification reflects the fundamental knowledge required of administrators managing NetWitness Platform deployments. The prerequisite for this certification is the NetWitness Certified Associate certification.

Cost: $133.40 USD |or| Training Credits: 120

On-Demand (Web-Based)

NetWitness Specialist Analyst Certification

The NetWitness Specialist Analyst certification reflects the fundamental knowledge required of security analysts performing incident response and analysis with the NetWitness Platform. The prerequisite for this certification is the NetWitness Certified Associate certification.

Cost: $133.40 USD |or| Training Credits: 120

On-Demand (Web-Based)

On-Demand Subscriptions

NetWitness Platform Subscription

This offering provides learners a flexible way to access the training they need when they need it. The on-demand subscription is value-priced to allow a single student access to all the training they need for a period of one (1) year. This on-demand subscription allows self-paced enablement at a significant discount versus Live Classroom training. The NetWitness on-demand subscription includes all the on-demand classrooms, on-demand labs, and on-demand learning for Administrators and Analysts using NetWitness Platform and NetWitness Endpoint.

Cost: $8,489.25 USD |or| Training Credits: 7,000

On-Demand (Self-Paced) Subscription

Individual Subscription

NetWitness Administrator Subscription

This offering provides learners a flexible way to access the training they need when they need it. The on-demand package is value-priced to allow a single student access to all the training they need for a period of one (1) year. This on-demand package allows self-paced enablement at a significant discount versus Live Classroom training. The NetWitness Administrator Training Package includes all the on-demand classrooms, on-demand labs, and on-demand learning for NetWitness Administrators Only.

Cost: $6,063.75 USD |or| Training Credits: 5,000

On-Demand (Self-Paced) Subscription

Individual Subscription

NetWitness Analyst Subscription

This offering provides learners a flexible way to access the training they need when they need it. The on-demand package is value-priced to allow a single student access to all the training they need for a period of one (1) year. This on-demand package allows self-paced enablement at a significant discount versus Live Classroom training. The NetWitness Analyst Training Package includes all the on-demand classrooms, on-demand labs, and on-demand learning for NetWitness Analysts Only.

Cost: $6,063.75 USD |or| Training Credits: 5,000

On-Demand (Self-Paced) Subscription

Individual Subscription