RSA NetWitness Platform Troubleshooting Space
April 24, 2019
There is a new space available on RSA Link: Troubleshooting the RSA NetWitness® Platform The...
RSA NetWitness Packet Meta in ELK
March 11, 2019
In line with some of my other integrations, I recently decided to also create a proof-of-concept...
What's on your wire: The curious case of ICMP Tunneling
February 26, 2019
I've come across ICMP tunneling only a handful of times, but this was the first time I had seen it...
What's on your wire: Zero-Width Spaces and their hidden danger
January 28, 2019
There are many reasons I enjoy working with the RSA Netwitness Platform, but it’s when our...
RSA Named a Leader in 2018 Gartner Magic Quadrant for SIEM
December 5, 2018
We are extremely proud to announce that RSA has been positioned as a “Leader” by Gartner®, Inc. in...
What's on your wire: Doing more with GEOIP
October 29, 2018
I was recently working with Eric Partington who asked if we could get the Autonomous System Numbers...
RSA NetWitness Free Tech Huddle Webcasts
September 19, 2018
RSA NetWitness Tech Huddles are an ongoing series of online presentations that cover a wide range...
What's on your wire: Anatomy of a new Lua packet parser
August 20, 2018
I was reviewing a packet capture file I had from a recent engagement. In it, the attacker had tried...
What's on your wire: Panning for Gold in OTHER - The story of HL7
July 23, 2018
Whenever I am on an engagement that involves the analysis of network traffic, my preferred tool of...
11 Reasons to Love RSA NetWitness Platform v11.x
July 20, 2018
If you haven’t seen the new RSA NetWitness Platform, you are missing out. Over the past 12 months,...