As of RSA Netwitness Platform 11.5, analysts have a new landing page option to help them determine where to start upon login. We call this new landing page Springboard. In 11.5 it will become the new default starting page upon login (adjustable) and can be accessed from any screen simply by click the RSA logo on the top left.
The Springboard is a specialized dashboard (independent of the existing "Dashboard" functionality) designed as a starting place where analysts can quickly see the variety of risks, threats, and most important events in their environment. From the Springboard, analysts can drill into any of the leads presented in each panel and be taken directly to the appropriate product screen with the relevant filter pre-applied, saving time and streamlining the analysis process.
As part of the 11.5 release, Springboard comes with five pre-configured (adjustable) panels that will be populated with the "Top 25" results in each category, depending on the components and data available:
Top Incidents - Sorted by descending priority. Requires the use of the Respond module.
Top Alerts - Sorted by descending severity, whether or not they are part of an Incident. Requires the use of the Respond module.
Top Risky Hosts - Sorted by descending risk score. Requires RSA NetWitness Endpoint.
Top Risky Users - Sorted by descending risk score. Requires RSA UEBA.
Top Risky Files - Sorted by descending risk score. Requires RSA NetWitness Endpoint.
Springboard administrators can also create custom panels, up to a total of ten, of a 6th type for aggregating "Events" based on any existing saved query profile used in the Investigate module. This only requires the core RSA NetWitness platform, with data being sourced from the underlying NetWitness Database (NWDB). This enables organizations to add their own starting places for analysts that go beyond the defaults, and to customize the landing experience to adjust for deployed RSA NetWitness Platform components:
Example of custom Springboard Panel creation using Event data
For more details on management of the Springboard, please see: NW: Managing the Springboard
And as always, if you have any feedback or ideas on how we can improve Springboard or anything else in the product, please submit your ideas via the RSA Ideas portal: RSA Ideas for the RSA NetWitness Platform
