When you have found data of interest in the Events view, you can do
internal lookups to NetWitness Endpoint and RSA Live, as well as
external lookups of meta values in community resources such as SANS IP
History and ThreatExpert Search. Open an Endpo...