I am having this issue with the Quarantine option in NW Endpoint. Can
somebody explain me what is the logic behind the Block and Quarantine
option for a specific file?Is the file deleted on the Endpoint machine,
and if so, how this is done. We have q...
I am testing the Windows Legacy Log Collector integration with NW 11.1.
I am following the WindowsLegacyCollectionGuide_11.x and following all
steps required. We have installed the Legacy Windows Collector on a
Windows 2008. Seems like on the windows...
Receiving strange errors in Newitness logs for jettty service. Here is
an example of the log::Jun 20 10:23:29 SA-SERVER jetty.sh: 2018-06-20
10:23:29,564 [qtp575593575-27207] ERROR
com.rsa.smc.sa.esm.service.DefaultEsmEndpointProvider -
java.lang.Nul...
If we have lots of devices, differentiated in separate Event groups, can
we see a report of the EPS per event group?The events will be collected
via VLCs.
Greetings, I need to know if I can find any information about deploying
SecOps Manager within the NetWitness Suite deployment. I am deploying a
virtual lab and I need to know if I can deploy the SecOps manager too.
My colleagues and I hardly find any...
Many thanks for the hint. We are interested in the "Quarantine" option
and what actions take place after we quarantine a particular module.
When a module is quarantined is it being stopped/blocked for further
execution on the endpoint? On the endpoin...
Greetings David, We have already deployed Archer, but We still have some
issues with the deployment of the SecOps 1.3 module and eventually link
it to Netwitness Suite 11.0 have you gone through this kind of
deployment, and do you have any guide(step...
Greetings Thomas, Thank you for the suggestion. You show this example on
Netwitness 10.6 - what about Netwitness 11.0, is there any difference?
Thank you in advance!
