NetWitness Community

KarimBenzina2 · 2018-01-04

Hi,We would like to know when "Spectre" and "Meldown" patchs will be released for netwitness suite? Thank you

KarimBenzina2 · 2016-12-13

Hi, I tried ESA rule template example which detects sudden loss of traffic from sadocs ESA documentation.https://sadocs.emc.com/0_en-us/088_SA106/50_Alrt/30_AddRulesLib/20_WrtAdvEPLRl/20_SmpAdvRl Unfortunally, it does not work in my environement. Her...

KarimBenzina2 · 2016-11-08

I am looking also for a solution to detect a device that stops sending logs using ESA (EPL rule) and not (event source monitoring).Thank you.

NetWitness Community

User Statistics

User Activity

RSA netwitness patch for Meltdown (CVE-2017-5754) and Spectre (CVE-2017-5753 & CVE-2017-5715)

Detect a loss of logs from a device IP

Re: Alert trigger when a device stop sending logs