Using a 3rd Party Certificate with Endpoint 11.4 - The Easy Way August 6, 2020 By default, NetWitness Endpoint 11.x creates a self-signed Certificate Authority during its initial... Read More
Using a 3rd Party Certificate with Endpoint 11.4 - The Hard Way August 6, 2020 By default, NetWitness Endpoint 11.x creates a self-signed Certificate Authority during its initial... Read More
Postman for NetWitness May 17, 2020 If you've ever done any work testing against an API (or even just for fun), then you've likely come... Read More
Custom Flat File Log Collection with NW-Endpoint 11.4 April 22, 2020 22APR2020 - UPDATE: Naushad Kasu has posted a video blog of this process and I have posted the... Read More
Identifying Multi-Valued Metas in the RSA NetWitness Platform February 22, 2020 The concept of multi-valued meta keys - those which can appear multiple times within single... Read More
Customizing Respond Incident Notification Emails May 2, 2019 One of the more common requests and "how do I" questions I've heard in recent months centers around... Read More
Examining Threat Aware Authentication in v11.3 April 29, 2019 One of the features included in the RSA NetWitness 11.3 release is something called Threat Aware... Read More
Scheduled and Ad-Hoc ESA Alerts April 23, 2019 Quite frequently when testing ESA alerts and output options / templates, I have wanted the ability... Read More
Understanding and Creating RSA NetWitness Endpoint Alerts in v11.3 April 21, 2019 The complete overhaul of NW-Endpoint 4.4 into NW-Endpoint 11.3 includes (among many changes) a... Read More
Dynamic Email Alerts with ESA January 4, 2019 I helped one of my customers implement a use case last year that entailed sending email alerts to... Read More