NetWitness Community

 Getting Started guide for NetWitness Customers/Partners: Click Here  

Netwitness Employees - Sign in via SSO here - employee login guide can also be found here

To View our 2024 & 2025 Virtual Instructor Led Trainings Schedule Click Here  

To View downloadable Course Catalog Click Here

Introduction to the NetWitness Platform  

This training includes role and fundamental concepts of the RSA NetWitness Platform. Threat visibility and analysis capabilities available via such tools as email reconstruction, event and file analysis, and meta keys are discussed, as well as basic architecture and data flow. Another section demonstrates the Platform in action when drawing data from infrastructure logs, network packet capture, and endpoint monitoring. 

NetWitness Platform 12: What's New ^{NEW Updates}

This FREE on-demand learning provides an overview of the new features and enhancements available in NetWitness Platform version 12.

12.0,12.1,12.2,12.3,12.3.1,12.4,12.4.1

NetWitness Platform 11.7: What's New

This FREE on-demand learning provides an overview of the new features and enhancements available in NetWitness Platform version 11.7.

NetWitness Webinars

This FREE Webinars are available in live sessions and on-demand.

NetWitness Platform Assessment

This FREE assessment is for learners who want to test

their level in using the NetWitness Platform, what are their strength points and development areas.

NetWitness Platform Foundations^{New Version!} 

This course covers NetWitness Platform architecture, data flow, core and enhanced components, metadata concepts, rules, investigation techniques including queries, filtering and pivoting, along with reporting, alerting and incident management.  Overviews of Endpoint Insights, Advanced Endpoint, UEBA and NetWitness Orchestrator are also provided. Students will gain insights into using the major features of the platform through a combination of lecture and demonstration, as well as practical hands-on exercises that reinforce the concepts.  

$3,465 USD

or

3,000 Training Credits

OnDemand:

ED-NW-FND-ODC

Public ILT: 

ED-NW-FND-ILT

Private Group: 

ED-NW-FND-GROUP  

NetWitness Platform ESA Fundamentals 

This On-Demand learning course presents an overview of Event Stream Analysis including a description of correlation approaches and ESA’s role in correlation, ESA components and features, when to use ESA and how configuration settings affect ESA rules. It focuses on the basics of ESA including architecture, creating basic rules, deploying rules, creating enrichments and notifications and forwarding alerts to the RESPOND module.

$225 USD

or

200 Training Credits

ED-NW-CUSTOM

ED-NW-TRAINCREDIT

NetWitness Endpoint Foundations

This 2-day course consists of lecture/discussion and lab exercises intended for lay the foundations of your understanding of NetWitness Endpoint.   

Intended audience is anyone performing security monitoring, hunting, and analysis with NetWitness Endpoint; anyone serving as admin or content creator for NetWitness Endpoint will also benefit. It supplements the NetWitness Platform Foundations and NetWitness Admin I courses. 

$2,310 USD

or

2,000 Training Credits

OnDemand:

ED-NW-ENDPOINT-ODC

Private Group: 

ED-NW-ENDPOINT-GROUP

NetWitness Platform Administration I^{New Version!}

This classroom-based course provides an overview of essential administrative tasks that are performed in order to get the RSA NetWitness Platform up and running. Students gain insight into configuring hosts and services and managing users within RSA NetWitness Platform and gain practical experience by performing a series of hands-on labs.

$2,310 USD

or

2,000 Training Credits

OnDemand:

ED-NW-ADMI-ODC

Public ILT: 

ED-NW-ADMI-ILT

Private Group: 

ED-NW-ADMI-GROUP

NetWitness Platform Administration II

This classroom training provides students with the knowledge and skills related to the administration and operation of the RSA NetWitness Platform. Topics covered include NetWitness Platform Services, Health and Wellness, Event Source Monitoring, backup and recovery, and administration tools for monitoring and troubleshooting the NetWitness platform. Students will gain practical experience by performing a series of hands-on labs.

$2,310

USD

or

2,000 Training Credits

11.7, 12.2

OnDemand:

ED-NW-ADMII-ODC

Public ILT: 

ED-NW-ADMII-ILT

Private Group: 

ED-NW-ADMII-GROUP

NetWitness Platform Analysis ^{New Version!} 

This training provides hands-on experience using the RSA NetWitness Platform to investigate and remediate security incidents. The course consists of about 50% hands-on lab exercises, following a practical methodology from the incident queue through investigation, event reconstruction, damage assessment, and documentation using real-world use cases. Please choose the training course and version below for detailed information and to register.

$2,310

USD

or

2,000 Training Credits

OnDemand:

ED-NW-ANLY-ODC

Public ILT: 

ED-NW-ANLY-ILT

Private Group: 

ED-NW-ANLY-GROUP

NetWitness Platform Introduction to Hunting 

This training provides an overview of threat hunting and covers hunting tools, content and methodologies that can be used to proactively find suspicious behavior. Students will apply the techniques acquired in this course to identify anomalies and find threats in the environment using Packets, Logs, and Endpoint. Please choose the training course and version below for detailed information and to register. 

$2,310 USD

or

2,000 Training Credits

OnDemand:

ED-NW-INHUNT-ODC

Public ILT: 

ED-NW-INTHUNTING-ILT

Private Group: 

ED-NW-INTHUNTING-GROUP

NetWitness Platform ESA EPL Rules 

This on-demand learning identifies a best practice strategy for creating EPL rules as well as for learning the EPL rule syntax. It uses examples and use cases to illustrate EPL rule concepts, such as streams, constructs, data windows and time constraints.

$225 USD

or

200 Training Credits

ED-NW-CUSTOM

ED-NW-TRAINCREDIT

NetWitness Platform Hunting Challenge

This private group Instructor-led class gives the students the opportunity to hunt for adversaries in a realistic environment with real-time attacks happening during the class. Students will be provided with several complex, multipart cyberattack use cases to work through, and will be tasked with finding key evidence about the attack, identifying targeted and compromised systems, reconstructing the sequence of events, and proposing a remediation plan. Students also will compete against each other to collect points through their investigation and by answering questions. They can also get hints that will cost them points from their overall score. Students will be given a minimal amount of introductory information and will conduct their analyses using their knowledge of networking protocols, endpoint operating systems, and common cyber-attack vectors.

$17,325 USD

or

15,000

Training Credits

Private Group: 

ED-NW-HUNTING-GROUP

Extra week - Virtual Lab Extension 

Extra one week/10 hours of virtual lab time per person. Follow instructions to request an extension to your existing (active) lab environment. If your lab session has expired or run time has ended, a new environment will be provisioned. Once an environment has expired or run time has ended, all previous work will be lost

$577 USD

or

500 Training Credits

OnDemand:

ED-NW-XTRA-LAB

NetWitness Platform Subscription 

This offering provides learners a flexible way to access the training they need when they need it. The on-demand subscription is value-priced to allow a single student access to all of the training they need for a period of one (1) year. This on-demand subscription allows self-paced enablement at a significant discount versus Live Classroom training.

The NetWitness on-demand subscription includes all the on-demand classrooms, on-demand labs, and on-demand learning for Administrators and Analysts using NetWitness Platform and NetWitness Endpoint.  

$8,085

USD  

or

7,000 Training Credits

NetWitness Administrator Subscription 

This offering provides learners a flexible way to access the training they need when they need it. The on-demand package is value-priced to allow a single student access to all of the training they need for a period of one (1) year. This on-demand package allows self-paced enablement at a significant discount versus Live Classroom training.

The NetWitness Administrator Training Package includes all the on-demand classrooms, on-demand labs, and on-demand learning for NetWitness Administrators Only.

$5,775

USD  

or

5,000 Training Credits

NetWitness Analyst Subscription 

This offering provides learners a flexible way to access the training they need when they need it. The on-demand package is value-priced to allow a single student access to all of the training they need for a period of one (1) year. This on-demand package allows self-paced enablement at a significant discount versus Live Classroom training.

The NetWitness Analyst Training Package includes all the on-demand classrooms, on-demand labs, and on-demand learning for NetWitness Analysts Only.

$5,775

USD  

or

5,000 Training Credits