This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions
Announcement Banner

Users are unable to open Netwitness Support Cases via email. Please open support cases via portal or by phone

View Details
  • NetWitness Community
  • Discussions
  • what all are the practical sessions can be done in network foundation lab
  • Options
    • Subscribe to RSS Feed
    • Mark Topic as New
    • Mark Topic as Read
    • Float this Topic for Current User
    • Bookmark
    • Subscribe
    • Mute
    • Printer Friendly Page

what all are the practical sessions can be done in network foundation lab

anaghaSurjith
anaghaSurjith Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-05-09 03:08 AM

As i am trying to do the lab session under RSA netwitness Logs% Network Foundation.What all are the best practical topics can be covered/practiced during the 2 hours.

  • Community Thread
  • Discussion
  • Forum Thread
  • labpractice
  • NetWitness
  • NW
  • NWP
  • ondemand lab
  • RSA NetWitness
  • RSA NetWitness Platform
  • to the rsa netwitness platform
0 Likes
Share
Reply
  • All forum topics
  • Previous Topic
  • Next Topic
1 REPLY 1

DaceMcPherson
New Contributor DaceMcPherson New Contributor
New Contributor
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-05-09 06:19 AM

Anagha:

 

First just curious about your question and further clarification of it.

I guess it would help to know if these are for you ( what is you role) or for a customer ( contact us and we can set up a call) but that information would help.

All of the labs are important of course. It sounds like it is a course you are taking.

 

I am not sure about the two hour limit you are speaking of. Is it an on demand course or what is the format and is this target time flexible?

 

Just to get another perspective, I am also looping in the lead curriculum developer to get her insight into this as well. She may have additional information. Lisa please feel free to follow-up this request /question and add or subtract ideas.

 

Assuming the questions can be clarified above, let me say It will certainly depend on the skill level you have and what your priorities are for learning in the foundations course.

 

I think some of the best include taking a use case through the course and performing various labs working with it. It presents a comprehensive view and sets of activities that are contained in the course in a practical effective manner for a student. That is the most comprehensive that touch several learned skill in the class.

 

These series of I speak of, trace through different parts of DDNS use case taught in the course from the time you discover it to the time you download feeds , create a custom feed and create application rules to facilitate meaningful alerts. Those are 4-5 labs. labs

 

Then the reporting and alerting labs ( how to report on this use case). The DDNS use case and the 6-7 ;abs total including all those tasks is the strongest part of the course in terms of practical lab applications.

 

Please reach out to me and/or Lisa if to get further direction or help.

 

Best regards;

Dace

 

 

Dace McPherson CISSP, CTIA, CEI | SeniorTechnical Education Consultant

<https://www.rsa.com/en-us>University

<https://www.rsa.com/en-us>, a Dell Technologies Company | RSA University Website<https://community.rsa.com/community/training>

Mobile:919-208-6248| dace.mcpherson@rsa.com<mailto:dace.mcpherson@rsa.com>

 

<https://www.rsa.com/en-us>,Certified Analyst and Administrator - NetWitness Logs and Packets

<https://www.rsa.com/en-us>,Certified Administrator – NetWitness Endpoint Analysis

<https://www.youracclaim.com/badges/6df440d4-a441-4a8d-89f7-c781389e61ec> <https://www.youracclaim.com/badges/aa51447d-ce1b-4a78-866f-7a0b771866b0> <https://www.youracclaim.com/badges/cf42a1fc-b01b-4d48-a076-0b42c2559b0d> <https://www.youracclaim.com/badges/c1243012-6e10-4651-814f-deb3719ce09c> ­=[ECC-CTIA-07FE193842E3] ghah

 

 

<http://rsa.im/2DEpdZj>

 

CONFIDENTIALITY NOTICE: The information contained in this email message and any files transmitted with it are confidential. It is intended only for the addressee and others authorized to receive it. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you ae advised that you have received the email in error. Please delete it and advise the sender immediately. You should not retain the message or disclose the contents to anyone. Any disclosure, copying. Distribution or action taken in reliance on the contents of the email and its attachments is strictly prohibited.

Preview file
18 KB
Preview file
45 KB
Preview file
13 KB
Preview file
4 KB
Preview file
13 KB
Preview file
8 KB
Preview file
13 KB
Preview file
4 KB
0 Likes
Share
Reply
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.