Summary
RSA is pleased to announce the general availability of NetWitness Orchestrator v6.2.1c. This release enhances communication between security team members and improves efficiency across the entire security program. Massive improvements have been made to the Playbook Building and Management process, dramatically improving usability and sharing capabilities. These improvements will allow more members of the security team to work together in the creation of Playbooks. This release also introduces a new browser extension which helps researchers pull information into NetWitness Orchestrator quickly and easily while performing their research activities, eliminating clicks and context switching that can be so costly.
Browser Extension
Designed to keep a threat researcher engaged in the investigation of a particular threat, the new browser extension can pull Indicators directly from many sites and import them into an analysts’ threat library with just a couple of clicks. This helps the analyst keep track of useful Indicators as they are doing their research, and then brings all that information into the platform for use at once.
Online Scanning: From a supported web browser, users can now scan an online resource for Indicators, and quickly and easily import them into NetWitness Orchestrator. This provides analysts who are populating their threat library an easy way to bring that information into NetWitness Orchestrator when found while reading blogs, emails, and even from the platform itself. The browser extension makes this seamless, without taking the analyst out of their process to record useful indicators, but instead queuing them up for a bulk import into the most relevant group.
Playbooks 2.0
In total, more than fifty improvements have been made to improve the Playbook Building and Management process, making it easier to use, easier to collaborate, and more robust. Some key highlights include:
- Easier to build: Easier to use interface is more intuitive and less frustrating. Playbooks can be tested at the App level allowing for iterative development and feedback before completing the entire playbook. This makes Playbook development faster and easier to debug when issues arise.
- Easier to manage: Team members can more easily collaborate on Playbook creation by leveraging interactive notes. Playbooks can also be easily shared with settings around collaboration, visibility, and control.
- Less worry: Proactive notifications let you know your playbooks are running effectively without the need for status checks, allowing the analyst to focus on using the tool rather than worrying about the tool.
For More Information:
For additional documentation, integrations, and more, visit the NetWitness Orchestrator page on RSA Link.
For data sheets and other similar content, visit the Security Automation and Orchestration page on NetWitness.com.
