BLOG

Products & Solutions

SIEM Log Management: 6 Mistakes That Could Be Costing You

08/12/2025

Security teams deploy SIEM platforms expecting immediate threat detection and rapid incident response. Reality delivers something different. Organizations discover that poor log management practices drain budgets, overwhelm analysts, and create dangerous security blind spots. The financial impact extends far beyond storage costs. Teams waste hours hunting through irrelevant data during critical investigations. Compliance violations stack […]

What Is SIEM and Why It’s No Longer Enough on Its Own

08/11/2025

SIEM, short for Security Information and Event Management, has long been the go-to solution for enterprise threat detection and compliance. It collects log data, monitors activity across the environment, and alerts security teams to suspicious events. Sounds like a solid foundation, right? Here’s the thing: while SIEM software plays a vital role in any security […]

NDR vs EDR: Which One is Right for Your Organization?

08/04/2025

Cyber threats don’t operate in isolation, so why should your defenses? Let’s be honest, most organizations already have Endpoint Detection and Response (EDR) in place. It has become a foundational part of any security program. But as attackers get smarter, EDR alone isn’t enough. What many security teams are still missing is Network Detection and […]

NetWitness Product Update: Exciting Innovations in the 12.5 Release

10/07/2024

In our recent webinar, Arthur Fontaine, Director of Product Marketing at NetWitness, provided an exciting update on our latest product innovations, particularly focusing on the recent 12.5 release.

CVE-2024-24919 in NetWitness Network

08/20/2024

A successful exploit of CVE-2024-4956 can have severe consequences for organizations relying on Check Point appliances for protection. Authors: Albert Priego Bravo, Massimiliano Faudarole.

The Sky Is Crying: The Wake of the 19 JUL 2024 CrowdStrike Content Update for Microsoft Windows and What We Should Remember and Take Away From It

07/22/2024

Friday the 19th was a challenging day for many organizations, teams, and individuals worldwide. We can all agree that it was stressful, and the impacts are still being assessed. It will take some time for many organizations to fully understand the ramifications of what has been called the single largest IT outage in history. On […]

Indicators of Compromise: A Comprehensive Guide to IOCs in Threat Detection and Response

02/13/2024

The term “Indicators of Compromise” means to artifacts or pieces of data that provide evidence that a security incident may have occurred or is ongoing. These indicators act as red flags, signaling potential security threats that require investigation and remediation. IOCs can manifest in various forms, and their identification is crucial for timely and effective […]

Data Warehouses vs Data Lakes: Navigating the Choice

01/11/2024

In the realm of data management and analytics, organizations encounter a pivotal choice when selecting an appropriate data repository. Data warehouses vs data lakes emerge as distinct methodologies for managing and analyzing data. A comprehensive understanding of their variances and advantages becomes imperative for making a well-informed decision that harmonizes with your organization’s goals. In […]

Cybersecurity Resilience: NetWitness EDR vs Open Source EDR Solutions

11/14/2023

Cybersecurity is one of the most prominent issues facing organizations today. After all the hard work it took to build your company from the ground up, it can seem like there is always a fight to protect it. Cyber threats can damage your organization’s reputation and put client information at risk. For this reason, you […]

Managed SIEM Services: Cybersecurity with Expertise and Efficiency

09/25/2023

If you are a business owner or decision-maker, then you know the importance of working with experienced professionals when it comes to certain tasks and responsibilities. When you need someone to make copies, answer phone calls, and go on coffee runs, you might be perfectly comfortable delegating these kinds of duties to an entry-level employee. […]

NetWitness 12.3: Delivering Greater Visibility for Modern Distributed Enterprises

09/06/2023 Robust cybersecurity and comprehensive visibility are no longer optional in today’s world of hybrid work environments, growing cyber threats, and increasing cloud adoptions—they’re a must. Here to meet this challenge is the NetWitness 12.3 release, loaded with an impressive array of cutting-edge features and integrations to provide maximum visibility for today’s Security Operations Centers (SOCs) […]
Read more

Leverage UEBA for Comprehensive Network Security with NetWitness

08/17/2023 As cyber security threats continue to increase, along with the levels of sophistication they use to carry out their attacks, organizations are looking for ways to enhance their security capabilities within their existing infrastructure. Designing and implementing new security measures is an extremely difficult task that can take many months or years to effectively complete, […]
Read more

Network Forensic Tools: The Key to Network Forensics

06/01/2023 The world of business and technology is always changing. In this digital age, network security and threat detection are very important. They are essential for any successful organization’s IT infrastructure. Without a strong system for network forensics, businesses can easily fall victim to hackers, malware, and other attacks. It is important for organizations like yours […]
Read more

Unlocking the Full Potential of SASE

05/23/2023 Essential strategies for future-proofing your organization with SASE. The rise of remote work and distributed teams has driven a rethinking of traditional network solutions. The result is Secure Access Service Edge (SASE), a transformative technology delivering enhanced networking and security features, offering a unified approach to safeguarding businesses while enabling modern business models. By leveraging […]
Read more

NetWitness FirstWatch Maps Threat Intelligence Content to the MITRE ATT&CK Framework

03/08/2023 The MITRE ATT&CK Framework is a comprehensive matrix of cyber adversary tactics and techniques designed to give defenders, threat hunters, and red teams a common understanding of the attacks they encounter every day. It helps identify, attribute, and even defend against threat actors. It has truly become the de facto model used by cybersecurity teams across the globe.
Read more

Moving the XDR Industry Forward with NetWitness Platform XDR 12

08/10/2022 The promise of XDR is exactly this: simplify the spectrum of processes – administratively and operationally – to the point where a security-conscious organization, on its own or through a service provider, can effectively protect against cyberthreats and suppress the risks imposed by these attacks. Enter NetWitness Platform XDR 12.
Read more

Global Connection Lines - Data Exchange, Pandemic, Computer Virus

XDR: A New Name and a Major Release

07/01/2022 NetWitness will soon release NetWitness Platform XDR v12.0 for customer download! This post covers highlights of this upcoming release including the updated product name. For more information on features and functionality, follow the links at the bottom. New Branding – NetWitness XDR NetWitness has long been synonymous with world class visibility, enabling customers to […]
Read more

NetWitness XDR Delivers the Industry’s Most Complete Solution – Today and Tomorrow

06/07/2022 It seems as though the world of cybersecurity has transitioned overnight. XDR, or eXtended Detection and Response, has become the mantra of every major player. Here at RSA Conference 2022, everyone from the endpoint, network, SIEM, and IoT worlds has suddenly embraced XDR as their core strategies—however loosely aligned with what they’re actually offering in […]
Read more

A New Path Forward for our Channel Partners

02/08/2022 Companies of all sizes, across all industries, around the world need effective threat detection and response capabilities. Try as we might, we at NetWitness know that when it comes to helping these organizations prepare for and battle against cyber threats, we need help. For years we’ve relied on our channel partners to help extend the […]
Read more

Understand Performance and Better Organize Threat Data with New NetWitness Orchestrator 6.3

12/16/2021 In the battle against new and aggressive threats, one thing has become abundantly clear: the more efficient a security team is, the better the opportunity it has at minimizing the impact of threats—or avoiding them all together. And with this mission of visibility and efficiency, NetWitness introduces the release of NetWitness Orchestrator 6.3. NetWitness Orchestrator […]
Read more

NetWitness Incident Response Services: World Class Threat Hunters Are a Call Away

11/03/2021 In the never-ending struggle against cyberattacks, NetWitness Incident Response (IR) is like having a world-class security team on call. They can help rapidly build security skills within your organization, and take the controls when attackers strike.
Read more

Build Your SOC’s Security Strategy with SOAR

10/19/2021 NetWitness spoke with Tari Schreider of Aite-Novarica Group about SOAR technology and the benefits it can deliver to SecOps for accelerating threat detection and response. Tari talks about SOAR misconceptions, the user experience that SOAR solutions should deliver, and how SOAR can help enterprises be more efficient.
Read more

Out of Many Brands, One: A New Day for NetWitness

09/08/2021 You might think you know NetWitness, but we’re changing—and growing. Here’s who we are, what we do, and our plans for brand growth and the future of XDR, ransomware defense, cloud AI, and IoT security.
Read more

NetWitness Orchestrator 6.2: New Features, Better Threat Intelligence

08/30/2021 The NetWitness Orchestrator 6.2 release includes two new features—Browser Extensions and Interactive Playbooks—that streamline and enhance your security team’s threat intelligence operations.
Read more

Introducing NetWitness Ransomware Defense Cloud Services

08/04/2021 Ransomware is scary but you’re not without options to protect yourself. NetWitness Ransomware Defense Cloud Services helps protect you now and prepare if you’re attacked.
Read more

NetWitness Adds Powerful IoT Monitoring and Threat Detection

08/03/2021 The Internet of Things is dramatically expanding the security surface area for organizations around the globe. What’s needed is a strategic solution that supports proprietary industrial systems as well as a new generation of open, standards-based solutions. NetWitness IoT brings IoT security into the future.
Read more

Defending Against the Latest Ransomware Attacks with NetWitness

07/20/2021 Ransomware is in all the news but it’s just the latest wave in the never-ending battle between attackers and defenders. NetWitness Platform is how to fight back.
Read more

Introducing NetWitness Cloud SIEM: All the Power Without the IT

05/26/2021 NetWitness is the security and compliance choice for of the world’s largest, most complex and most security-conscious organizations. NetWitness Cloud SIEM makes it easy for organizations of any size and type to deploy world-class SIEM for threat detection or compliance purposes.
Read more

How Useful Are Your Threat Intelligence Feeds?

05/12/2021 Threat Intelligence (TI) is a vital component of your security automation and response (SOAR) system. Security analysts need TI that’s current, in context, and that reflects the reliability of the feed source. NetWitness Orchestrator optimizes TI data so security analysts can process cases faster and remediate completely.
Read more

NetWitness – A Brief History of an Iconic Threat Detection & Response Platform

04/14/2021 The history of NetWitness reflects the continuous evolution of threats and bad actors. Begun as a government intelligence research project, NetWitness has earned a reputation as the most powerful detection and forensics platform in the industry.
Read more

Orchestration and Automation without Intelligence is just Dumb

04/08/2021 When it comes to SOAR solutions, threat intelligence needs to expand beyond threat detection. It should play a role in every aspect of incident identification, investigation and resolution. Without properly leveraging threat intelligence, SOAR solutions can miss the mark when it comes to improving security operation efficiency.
Read more

How RSA NetWitness Platform® Protects against Ransomware Attacks

02/17/2021 Ransomware attacks are becoming more targeted, sophisticated, and expensive. See how RSA NetWitness Platform can help your organization protect its IP and defend against attacks.
Read more

Visualization of RSA NetWitness Detect AI

Introducing RSA NetWitness® Detect AI

02/03/2021 RSA NetWitness Detect AI is the all-new pure SaaS analytics module for RSA NetWitness Platform. It makes threat detection better, faster, and easier for advanced security operation centers.
Read more

The XDR Perspective: RSA’s View on Extended Detection and Response

10/28/2020 Although XDR is a new framework for the cybersecurity industry, RSA has been delivering on the vision of XDR for years. See how RSA NetWitness Platform meets and exceeds the critical components of XDR and helps defend organizations against today’s most sophisticated threats.
Read more

Various icons appear to be soaring towards a bright ligth

Visibility into the Unknown

07/30/2020 The concept of enabling a dynamic workforce has shifted from a “nice to have” to a mandate to help the organization remain productive. Many organizations ask how RSA, and more specifically RSA NetWitness Orchestrator, can help them overcome the new security risks associated with the dynamic workforce. Hear what one of our System Engineers has to say.
Read more

Cityscape at night under and animated dome of dots and bars signifying security