PrefaceDownloading and pre-processing external contentCreating a custom
feedPreface This blog post explains how to import external intelligence
as a NetWitness recurring feed. As an example, the Locky Ransomware C2
domain blocklist from https://ranso...
PrefaceEnabling MySQL collectionTesting MySQL collectionPreface This
blog post should help everybody who wants to integrate the free
(community) version of the MySQL database with NetWitness for Logs. This
blog does NOT describe the MySQL database au...
Hi David,I cannot answer the first question, but when you go to the
downloads page for 10.6.4 (RSA Security Analytics 10.6.4 - Downloads )
there is a fix and there are instructions on how to install it. The
re-release itself is not yet available. The...
Hello Yossi,I have written an article to add a MySQL ODBC source. You
can do similar for your own source.This is the link:
https://community.rsa.com/community/products/netwitness/blog/2016/10/18/integrating-a-mysql-community-database-with-netwitness-...
Hi Roman,you can filter these events easily with an app rule on the log
decoder. Please find an example below. You can define rules like this
for all the data that is meaningless to you.
Hi Mike,you can use NwConsole to get the statistics for all hosts. To
list the system statistics, issue the following command to the appliance
port of each host: NwConsole -c login :56006:ssl admin
netwitness -c /sys/stats ls RSA Security Analytics C...
