A question has come up a few times on how someone could exclude certain
machines from triggering NetWitness Endpoint Agent alerts easily. This
particular use case were their "Gold Images" which are used for
deploying machines. As part of a bigger vis...
Shout out to @Casey Switzer, @Josh Randall & @Larry Hammond. Without
their help, the lab, configuration and operational considerations would
not be possible. Last year in RSA NetWitness 11.3, a new integration was
introduced to allow NetWitness to in...
For the PowerShell script, it's just a simple: Get-ADUser -Filter *
-Properties DisplayName, EmailAddress, Title | select DisplayName,
EmailAddress, Title | Export-CSV "C:\Scripts\Email_Addresses.csv" There
are definitely more elegant ways of doing t...