This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
ONaqellari
ONaqellari Contributor
Contributor
since ‎2019-09-03
‎2022-04-16

User Statistics

  • 10 Posts
  • 0 Solutions
  • 2 Likes given
  • 1 Likes received
Conversation Starter
Making Yourself at Home
Welcome Back!
Someone Likes You
View all badges
Announcement Banner

Users are unable to open Netwitness Support Cases via email. Please open support cases via portal or by phone

View Details
  • NetWitness Community
  • About ONaqellari

User Activity

  • Posts
  • Replies

Reports for user activity (login and log-off) on Windows

by ONaqellari 2022-01-19 general.in NetWitness Discussions • latest reply by MaximMarchenko 2022-01-25
2022-01-19
Dear community, i would like to have your opinion and help in order to create reports for user activity on windows such as log-in and log-out. Based on windows Logon events and Logon type it seems kind of frustrating and it appears like the numbers o...

Rules which will alert every login with domain-admin account (built-in local administrator accounts as well)

by ONaqellari 2021-12-16 general.in NetWitness Discussions • latest reply by ChrisIchelson 2021-12-22
2021-12-16
Dear community, i'm trying to build or to deploy (if possible) rules which will alert every login with domain-admin account (built-in local administrator accounts as well) . Please can anyone help ? Thank You

automatically monitoring of simultaneous logins by users with elevated access rights

by ONaqellari 2021-09-28 general.in NetWitness Discussions • latest reply by DaveGlover 2021-10-27
2021-09-28
Dear members, I'm trying to create automatically reports for monitoring of simultaneous logins by users with elevated access rights. I’m using RSA Netwitness Platform 11.5.2.0 and I’m asking if anyone has implemented this reports before or if anyone ...

How to stop ESA sending mails for and old rule

by ONaqellari 2020-08-31 general.in NetWitness Discussions
2020-08-31
Hello, I have deployed an rule on ESA but the parameters were wrong. I have deleted the rule but now ESA is sending a lot of mails and is not stopping I have reboot ESA host but it is not stopping. Please can anyone help me ?

Troubleshooting CISCO Asa FW Event Source

by ONaqellari 2020-06-25 general.in NetWitness Discussions • latest reply by KarimBenzina 2020-08-31
2020-06-25
Hello,Can anyone help me start troubleshooting cisco asa 5506 since i'm not getting any logs from itAll the configuration were done on the device Thank You
View more

Re: Reports for user activity (login and log-off) on Windows

by ONaqellari 2022-01-25 general.in NetWitness Discussions • latest reply by MaximMarchenko 2022-01-25
2022-01-25
Do you think if there is any way to enable for example Audit Logs on DC in order to get such activity to SIEM ?

Re: Reports for user activity (login and log-off) on Windows

by ONaqellari 2022-01-25 general.in NetWitness Discussions
2022-01-25
  I understand  Well it makes sense 

Re: Reports for user activity (login and log-off) on Windows

by ONaqellari 2022-01-25 general.in NetWitness Discussions • latest reply by MaximMarchenko 2022-01-25
2022-01-25
Hello @MaximMarchenko Yes you are right. Actually i noticed that the logs registered on workstation locally do not match with those on DC. However still i can see some logon type 2 coming from DC

Re: Troubleshooting CISCO Asa FW Event Source

by ONaqellari 2020-08-31 general.in NetWitness Discussions
2020-08-31
Hello. We have resolved. It was a missconfiguration on FW
Likes from
User Count
KarimBenzina
Employee KarimBenzina
1
View all
Likes given to
User Count
KarimBenzina
Employee KarimBenzina
1
View all
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.