Script to Compile SA Inventory and Configuration Information (SA_Enviro_Check.sh)
January 27, 2017
UPDATED 2-1-2017 to Version 0.4 Changelog: 1-20-2017 (0.2) : Added capability to auto-populate all...
RSA NetWitness Suite Event Stream Analysis Solution Brief
December 8, 2016
This solution brief provides details about RSA NetWitness Event Stream Analysis (ESA), a powerful...
Hunting & Investigation Charts
November 28, 2016
If you haven't yet deployed the content behind the new Hunting Pack and Investigation Model, go...
Looking behind the curtain. How RSA Netwitness Packets and Endpoint see a Cerber Ransomware compromise
November 23, 2016
*** Warning the sites referenced contain live exploit kits and malware. As always please exercise...
Using Explore to Synchronize Disabled Parsers across Decoders
October 4, 2016
This is a quick video that covers the following topics: Using Explore to disable identical...
Netwitness Endpoint For First Responders
September 16, 2016
In this short video I will show you how Netwitness Endpoint/ECAT can really empower first...
Security Analytics 10.6: Automatic Event Source Monitoring
August 8, 2016
This unofficial document is intended to summarize the improvements introduced since Security...
Security Analytics 10.6 Raw Log Search Improvements
August 1, 2016
This unofficial document is intended to summarize the improvements introduced since Security...
Announcing Support for VLC Running in AWS
July 25, 2016
I'm pleased to announce that we have qualified and now support the ability for our Virtual Log...
Who referred you? Getting more out of HTTP referer meta.
June 7, 2016
Last year, I was on an incident response engagement where we were investigating several drive-by...