Dears, I have observed that EPLH agent is not able to get memory image
if Device Guard Virtualization based security policy is enabled. When i
check in detail came to know that mentioned policy is automatically
update after some update. if Device Gua...
Dears, Need support where to get the RSA Netwitness Orchestrator
documents, when we try to access the orchestrater documentation
mentioned under following link, it give access denied.
https://community.netwitness.com/t5/netwitness-orchestrator/tkb-p/...
Dears, Do any one has some good idea how to verify playbook in SOAR, any
reference guide or any other material? Support related to SOAR
troubleshooting issues is below average.
Hi, I have observed that meta keys "pardm.src" or "param.dst" which
contains directory path. when we click on parameter then some time it
return the directory path with "/" and some time it return with "//".
e.g. param.src='xxx.exe "c:\\users\\xyz\\a...
Need some best recommendation about fine tuning of APP rules. if I want
to fine tune multiple hashes which are generation many False Positives
so what is the best way to fine-tune 1- Whitelist the file and update
the app rule with below contect != 'f...
