Live Services Management

NetWitness Live is the gateway to a rich environment that offers access to feeds, tools, and other resources.

NetWitness Live

Live is the component of NetWitness that manages communication and synchronization between NetWitness services and a library of Live content available to NetWitness customers. Live provides a simple interface for browsing, selecting, and deploying content from the NetWitness Live Content Management System to NetWitness services and software. In addition to managing feeds from the CMS Library, Live allows users to deploy custom feeds and packages.

Note: Any customer with valid maintenance can access NetWitness Live.

Note: If you are logged into an Analyst UI, you can only view but cannot enable, disable, edit, or configure NetWitness Live.

The content management system (CMS) library (known as Live) is a valuable source of the latest internet security resources for NetWitness customers. It provides a view into the collective intelligence and analytical skills of the worldwide security community to ensure that users have the most current visibility into attack vectors.

Live gathers the best advanced threat intelligence and content in the global security community - the ideas, research, ongoing tracking, and analysis - and brings it directly into the user’s security operations center to definitively classify computers associated with botnets, malware, and other malicious exploits. Live aggregates, consolidates, and illuminates only the most pertinent information relevant to an organization on a real-time basis.

NetWitness Feedback and Data Sharing

Live Feedback is intended to help improve NetWitness. Once you set up and configure a Live account, usage data is shared with NetWitness.

For more details, see NetWitness Feedback and Data Sharing.

For Debian Linux and NetWitness Endpoint Users

If you are upgrading to the latest version of NetWitness Platform and you are using NetWitness Endpoint and also have any Debian Linux endpoint systems, NetWitness recommends that you go to Live and download the following application rules:

  • autorun debian package mismatch
  • autorun file path not part of debian package
  • debian package hash mismatch in important system directory
  • debian package hash mismatch
  • file path not part of debian package in important system directory
  • file path not part of debian package