This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Education Courses
Announcement Banner

Users are unable to open Netwitness Support Cases via email. Please open support cases via portal or by phone

View Details
  • NetWitness Community
  • NetWitness Education
  • Courses
  • RSA NetWitness Logs and Network Content Creation (11.0)
  • Options
    • Subscribe to RSS Feed
    • Bookmark
    • Subscribe
    • Email to a Friend
    • Printer Friendly Page
    • Report Inappropriate Content
No ratings

RSA NetWitness Logs and Network Content Creation (11.0)

JosephCantor
Employee JosephCantor
Employee
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

on ‎2019-12-18 01:32 PM

On-demand

In order to register for a class, you need to first create a Dell Education account

If you need further assistance, contact us

Summary

This On-Demand training course provides recommended methodologies for creating content to assist you in discovering, analyzing and resolving threats in RSA NetWitness Logs & Network. 

 

Overview

This recorded training course provides recommended methodologies for creating content to assist you in discovering, analyzing and resolving threats in RSA NetWitness Logs & Network. Students will benefit from both lecture and hands-on lab exercises using their own virtual environment to practice the techniques learned in class.

 

Audience

Anyone who will need to create content for discovering, analyzing, and resolve threats using the RSA NetWitness Platform.  

 

Duration

16 hours 

 

Prerequisite Knowledge/Skills

Student should have completed or have comparable knowledge to what is provided in the following course:

  • RSA NetWitness Logs & Network Foundations 

 

Course Objectives

Upon successful completion of this course, participants should be able to:

  • Describe content types and identify how and when to use each content type
  • Optimize content for performance and functionality
  • Describe how index settings affect content
  • Edit index settings to maximize results
  • Identify how to use Live content to address specific needs
  • Describe how to deploy and use the Hunting Pack
  • Describe methodologies for creating content
  • Create a taxonomy for rules and reports
  • Describe how to find and use malicious data in content creation
  • Create reports to verify efficacy of content
  • Use techniques and methodologies to automate threat detection
  • Validate results and refine your approach accordingly

 

 

 

 

 

On-demand

In order to register for a class, you need to first create a Dell Education account

If you need further assistance, contact us

  • &
  • 11
  • 11.0.x
  • Admin
  • administrator
  • admnistration
  • analyst
  • basic
  • Best Practices
  • content expert
  • detect
  • Ed Services
  • education
  • Education Services
  • english
  • ESA
  • event correlation
  • fee
  • fee required
  • french
  • Getting Started
  • ilt
  • in person training
  • in-person
  • Incident
  • incident responder
  • instructor-led training
  • Investigation
  • Live
  • logs & network
  • logs & network foundations
  • logs & packets
  • manage
  • navigator
  • NetWitness
  • netwitness navigator
  • netwitness training
  • NW
  • NWP
  • on demand classroom
  • on-demand classroom
  • Product Training
  • respond
  • rsa
  • RSA NetWitness
  • rsa netwitness logs & network
  • rsa netwitness logs & network foundations
  • RSA NetWitness Platform
  • RSA NetWitness Training
  • RSA University
  • RSAU
  • security events
  • soc manager
  • training
  • Training Course
  • university
Was this article helpful? Yes No
0 Likes
Share
Version history
Last update:
‎2019-12-18 01:32 PM
Updated by:
Employee JosephCantor
Contributors
  • JosephCantor
    JosephCantor
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.