A question has come up a few times on how someone could exclude certain
machines from triggering NetWitness Endpoint Agent alerts easily. This
particular use case were their "Gold Images" which are used for
deploying machines. As part of a bigger vis...
Shout out to @Casey Switzer, @Josh Randall & @Larry Hammond. Without
their help, the lab, configuration and operational considerations would
not be possible. Last year in RSA NetWitness 11.3, a new integration was
introduced to allow NetWitness to in...
Hey Calvin, Hopefully the comment from Josh below helps out. We have a
SecurID API and Josh had put in the work in his previous blog post to
demonstrate how to interact with the high risk portion.
For the PowerShell script, it's just a simple: Get-ADUser -Filter *
-Properties DisplayName, EmailAddress, Title | select DisplayName,
EmailAddress, Title | Export-CSV "C:\Scripts\Email_Addresses.csv" There
are definitely more elegant ways of doing t...
