This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Education Courses
Announcement Banner

Users are unable to open Netwitness Support Cases via email. Please open support cases via portal or by phone

View Details
  • NetWitness Community
  • NetWitness Education
  • Courses
  • NetWitness Platform ESA Fundamentals 11.3
  • Options
    • Subscribe to RSS Feed
    • Bookmark
    • Subscribe
    • Email to a Friend
    • Printer Friendly Page
    • Report Inappropriate Content
No ratings

NetWitness Platform ESA Fundamentals 11.3

JosephCantor
Employee JosephCantor
Employee
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

on ‎2019-07-17 09:56 AM - edited 3 weeks ago by Occasional Contributor aymanm2 Occasional Contributor

Netwitness-Education-2C (2).png

 

Access Training
for Customers/Partners

Access Training
for NetWitness Employees

 

 

 

 

$200 USD

 

 

200 Training Credits

 

 

Summary

 Are you an RSA Netwitness customer looking for guidance on ESA? This OnDemand learning will provide you with the right information to get started.

 

Overview

This On-Demand learning course presents an overview of Event Stream Analysis including a description of correlation approaches and ESA’s role in correlation, ESA components and features, when to use ESA and how configuration settings affect ESA rules. It focuses on the basics of ESA including architecture, creating basic rules, deploying rules, creating enrichments and notifications and forwarding alerts to the RESPOND module.

 

Audience

Anyone who is interested in Event Stream Analysis (ESA) with relation to the RSA NetWitness Platform.

 

Delivery Type

On-Demand Learning (self-paced eLearning)

 

Duration

60 Minutes

 

Prerequisite Knowledge/Skills

It is recommended that students complete the following eLearning courses prior to taking this training:

  • Introduction to the RSA NetWitness Platform

 

Course Objectives

Upon successful completion of this course, participants should be able to:

  • Describe a correlation approach
  • Describe ESA’s role in correlation
  • Describe the features and components of ESA
  • Identify when and how to use an ESA rule
  • Describe the features of the basic rule builder
  • Create a basic rule
  • Create enrichments
  • Describe how configuration settings affect ESA rules
  • Explain the best practices for writing ESA rules

 

Course Outline

Module 1: A Correlation Approach
Module 2: ESA Overview
Module 3: Basic ESA Rules
Module 4: Configuring ESA
Module 5: ESA Best Practices

 

If you have any questions, please contact your account manager or Contact Us directly!

 

 

Labels:
  • Student Guides
  • 11.1
  • 11.1 what's new
  • 11.x
  • Admin
  • basic
  • Ed Services
  • education
  • Education Services
  • free
  • free on-demand learning
  • incident repsonder
  • log and packets
  • logs & network
  • NetWitness
  • NetWitness Platform
  • netwitness training
  • NW
  • NWP
  • on demand learning
  • on demand training
  • on-demand
  • on-demand learning
  • online
  • Platform
  • Product Training
  • rsa
  • RSA NetWitness
  • RSA NetWitness Platform
  • rsa netwitness platform 11.1 what's new
  • RSA NetWitness Training
  • RSA University
  • RSAU
  • training
  • Training Course
  • university
  • Virtual
  • what's new
Was this article helpful? Yes No
3 Likes
Share
Version history
Last update:
3 weeks ago
Updated by:
Occasional Contributor aymanm2 Occasional Contributor
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.