Hi , I need urgent help in creating NetWitness rule as below:1- MS DC
users who logged in during a specific time frame (e.g. from
6:00PM-to-6:00AM).2- MS DC users who upgraded into admin.3- MS DC users
who did brute-force attempts. Looking forward to...
Dear All, We have 5 Fortigate firewalls and one FortiAnalyzer, currently
the firewalls send their logs into the FortiAnalyzer.No we want to
integrate the five firewalls into our RSA SIEM, question is: Is it
recommended that we integrate the five fire...
Dear , How can I figure out the link speed needed for a link between RSA
Netwitness and log sources which give 500 events per second??Please help
asap.
Hi Dave, I need a confirmed or at least almost confirmed size of the
event, is 450 bytes almost confirmed? I need this in order I make
official decision in making a data link between our RSA SIEM and a
client (log source). please advise. Haitham
