NetWitness Community

SeanGriesheimer · 2019-09-12

OverviewTo ISO or Not to ISOVM Host SizingRaw Event Data StorageInstall ServicesValidate Folder Sizes - RSA NetWitness Platform DatabasesValidateThresholds -MongoDBMinimum Available Space - The Key to ReliabilityMonitoring Part 1: Folder SizesMonitor...

SeanGriesheimer · 2019-07-12

OverviewSending a notification based on a critical or time-sensitive event seen in your environment is table stakes functionality for any detection platform. Alerting someone in a timely manner is important, but building a custom e-mail that includes...

SeanGriesheimer · 2019-09-13

Oh that's huge! Thanks John!!

SeanGriesheimer · 2019-09-08

There is definitely no single right answer for everyone. It comes down to understanding your risks:- What assets do you have that others want?- How can they get at those assets?- What methods of attack can you prevent entirely?What's left are, hopefu...

SeanGriesheimer · 2019-08-30

That is different for every environment. Run the script with "-d" and it will give you estimates.

SeanGriesheimer · 2019-08-30

Absolutely! You'll need some space to store the backup information on the head unit, but that shouldn't be a problem unless you have an abnormally large amount of data on that appliance. If you run the script with the "-d" switch, it will check every...

SeanGriesheimer · 2019-07-31

Discrete 1U Decoders and Concentrators require external storage, either our Powervault appliances or SAN storage. You definitely should contact your RSA representatives if you're unsure what storage should be attached as that would have been discusse...

NetWitness Community

User Statistics

User Activity

Tips to Build [Small] RSA NetWitness Platform Virtual Hosts

Building the Notifications of Your Dreams in the RSA NetWitness Platform

Re: Tips to Build [Small] RSA NetWitness Platform Virtual Hosts

Re: Use of SIEM examples in other environments and companies

Re: External Backup Host for Upgrade to 11.3

Re: External Backup Host for Upgrade to 11.3

Re: Can i deploy 2 ESA as primary in same SA server?