Hi, based on previous knowledge with other siem systems.... is there a
place in Netwitness where can I define what is the network segments that
define my local network?I am asking this since when I try to use meta
key "outbound" and try to investigat...
Hi, While investigating a certain type of log (trendmicrodsa) i have
noticed that even though i do have an existing meta key that contains a
value, i cant use this meta key when (for example) trying to 'work' with
that meta key under meta groups...do...
Hi There,Right-Clicking on an IP address allowing me to choose the
option of "External lookup".I would like to add/remove some of the
engines listed in there. do I have the option to do so?some of them lead
to non-relevant links.Shani Amytai
Hi, Want to perform a search that will look into the raw logs
information.For example - I want to find logs that contain a specific
word or a combination of words..which meta should I choose?
Hi,we are now configuring netwitness 11.2 and on "ESA rules" tab under
"Configure" we have no rules yet.I was wondering if there is a set of
baseline rules that can be implemented instantly, instead of adding each
rule individually (similar to just s...
Hi Ericthank youI will take a look at the links you have attached.
follow to what you have asked:1. BFK Passive DNS Collection - leads to
404 error (The requested URL /bfk_dnslogger.html was not found on this
server)2. Malware Domain List - Leads to ...
I have created a new deployment folder and named it "OOTB ESA"clicked
the "+" sign to add from "ESA rules", then found 59 RSA live rules.am I
at the right place?
