How can I search for File Hash(MD5, SHA256) and Filename on my Endpoint
servers or notebook in Netwitness?How can I filter the search only on my
servers? Thank you
I have the rpcnetp.exe file on 84 clientsOn some clients, the IIOC score
for the file is 400+.On some clients, the IIOC score is 10+. 1) Why is
there a difference in the IIOC score for the exact same file?2) Can i
safely whitelist the rpcnetp.exe fil...
I am new NetWitness Endpoint 4.4.I need some advise/pointers on analysis
in Netwitness.Please point me to some guides or posts that can help me
to do my analysis.Advise on how to score some low hanging fruits by
performing whitelisting of files,e.g C...
I encounter a Window Event error Error Code 7000 on my SEPM server.The
Message is as follows---Splunk could not get the description of this
event. Either the component that raises this even is not installed on
your local computer or the installation ...
