NetWitness Named a Visionary in the Gartner^® Magic Quadrant^™ for Network Detection and Response

NetWitness Documentation & Resources

Your go-to hub for guides, technical references, and best practices across the NetWitness portfolio.

Recent Blogs

Cybersecurity for Critical Infrastructure: Common Blind Spots in Critical Infrastructure Environments

Insider Threat Detection Capabilities Every Enterprise Should Look For

The Role of Security Automation Tools in Faster Threat Detection and Response

How NetWitness Strengthens Identity Threat Detection and Response

Recent News

PartnerOne Appoints John Pirc (JP) to Chief Product and Technology Officer for its Cybersecurity Portfolio

NetWitness Extends Threat Detection Across Converged IT and OT Environments

NetWitness and Lumifi Cyber Partner to Deliver MDR for IT/OT

NetWitness and BforeAI Forge Strategic Partnership to Revolutionize Cybersecurity with Predictive Intelligence

Get Started Section

Portal Section

Are you a NetWitness Customer?

Are you a NetWitness Partner?

Community Stats / Leaderboard

Ready To Join The Conversation?

Create your profile, connect with peers, and make the most of your NetWitness experience.

img:is([sizes=auto i],[sizes^="auto," i]){contain-intrinsic-size:3000px 1500px}img.wp-smiley,img.emoji{display:inline !important;border:none !important;box-shadow:none !important;height:1em !important;width:1em !important;margin:0 .07em !important;vertical-align:-.1em !important;background:none !important;padding:0 !important}.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}.safe-svg-cover{text-align:center}.safe-svg-cover .safe-svg-inside{display:inline-block;max-width:100%}.safe-svg-cover svg{fill:currentColor;height:100%;max-height:100%;max-width:100%;width:100%}:root{--wp--preset--aspect-ratio--square:1;--wp--preset--aspect-ratio--4-3:4/3;--wp--preset--aspect-ratio--3-4:3/4;--wp--preset--aspect-ratio--3-2:3/2;--wp--preset--aspect-ratio--2-3:2/3;--wp--preset--aspect-ratio--16-9:16/9;--wp--preset--aspect-ratio--9-16:9/16;--wp--preset--color--black:#000;--wp--preset--color--cyan-bluish-gray:#abb8c3;--wp--preset--color--white:#fff;--wp--preset--color--pale-pink:#f78da7;--wp--preset--color--vivid-red:#cf2e2e;--wp--preset--color--luminous-vivid-orange:#ff6900;--wp--preset--color--luminous-vivid-amber:#fcb900;--wp--preset--color--light-green-cyan:#7bdcb5;--wp--preset--color--vivid-green-cyan:#00d084;--wp--preset--color--pale-cyan-blue:#8ed1fc;--wp--preset--color--vivid-cyan-blue:#0693e3;--wp--preset--color--vivid-purple:#9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple:linear-gradient(135deg,#0693e3 0%,#9b51e0 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan:linear-gradient(135deg,#7adcb4 0%,#00d082 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange:linear-gradient(135deg,#fcb900 0%,#ff6900 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red:linear-gradient(135deg,#ff6900 0%,#cf2e2e 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray:linear-gradient(135deg,#eee 0%,#a9b8c3 100%);--wp--preset--gradient--cool-to-warm-spectrum:linear-gradient(135deg,#4aeadc 0%,#9778d1 20%,#cf2aba 40%,#ee2c82 60%,#fb6962 80%,#fef84c 100%);--wp--preset--gradient--blush-light-purple:linear-gradient(135deg,#ffceec 0%,#9896f0 100%);--wp--preset--gradient--blush-bordeaux:linear-gradient(135deg,#fecda5 0%,#fe2d2d 50%,#6b003e 100%);--wp--preset--gradient--luminous-dusk:linear-gradient(135deg,#ffcb70 0%,#c751c0 50%,#4158d0 100%);--wp--preset--gradient--pale-ocean:linear-gradient(135deg,#fff5cb 0%,#b6e3d4 50%,#33a7b5 100%);--wp--preset--gradient--electric-grass:linear-gradient(135deg,#caf880 0%,#71ce7e 100%);--wp--preset--gradient--midnight:linear-gradient(135deg,#020381 0%,#2874fc 100%);--wp--preset--font-size--small:13px;--wp--preset--font-size--medium:20px;--wp--preset--font-size--large:36px;--wp--preset--font-size--x-large:42px;--wp--preset--spacing--20:.44rem;--wp--preset--spacing--30:.67rem;--wp--preset--spacing--40:1rem;--wp--preset--spacing--50:1.5rem;--wp--preset--spacing--60:2.25rem;--wp--preset--spacing--70:3.38rem;--wp--preset--spacing--80:5.06rem;--wp--preset--shadow--natural:6px 6px 9px rgba(0,0,0,.2);--wp--preset--shadow--deep:12px 12px 50px rgba(0,0,0,.4);--wp--preset--shadow--sharp:6px 6px 0px rgba(0,0,0,.2);--wp--preset--shadow--outlined:6px 6px 0px -3px #fff,6px 6px #000;--wp--preset--shadow--crisp:6px 6px 0px #000}:where(body){margin:0}:where(.is-layout-flex){gap:.5em}:where(.is-layout-grid){gap:.5em}body .is-layout-flex{display:flex}.is-layout-flex{flex-wrap:wrap;align-items:center}.is-layout-flex>:is(*, div){margin:0}body .is-layout-grid{display:grid}.is-layout-grid>:is(*, div){margin:0}body{padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px}:root :where(.wp-element-button, .wp-block-button__link){background-color:#32373c;border-width:0;color:#fff;font-family:inherit;font-size:inherit;font-style:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;padding-top:calc(.667em + 2px);padding-right:calc(1.333em + 2px);padding-bottom:calc(.667em + 2px);padding-left:calc(1.333em + 2px);text-decoration:none;text-transform:inherit}.has-black-color{color:var(--wp--preset--color--black) !important}.has-cyan-bluish-gray-color{color:var(--wp--preset--color--cyan-bluish-gray) !important}.has-white-color{color:var(--wp--preset--color--white) !important}.has-pale-pink-color{color:var(--wp--preset--color--pale-pink) !important}.has-vivid-red-color{color:var(--wp--preset--color--vivid-red) !important}.has-luminous-vivid-orange-color{color:var(--wp--preset--color--luminous-vivid-orange) !important}.has-luminous-vivid-amber-color{color:var(--wp--preset--color--luminous-vivid-amber) !important}.has-light-green-cyan-color{color:var(--wp--preset--color--light-green-cyan) !important}.has-vivid-green-cyan-color{color:var(--wp--preset--color--vivid-green-cyan) !important}.has-pale-cyan-blue-color{color:var(--wp--preset--color--pale-cyan-blue) !important}.has-vivid-cyan-blue-color{color:var(--wp--preset--color--vivid-cyan-blue) !important}.has-vivid-purple-color{color:var(--wp--preset--color--vivid-purple) !important}.has-black-background-color{background-color:var(--wp--preset--color--black) !important}.has-cyan-bluish-gray-background-color{background-color:var(--wp--preset--color--cyan-bluish-gray) !important}.has-white-background-color{background-color:var(--wp--preset--color--white) !important}.has-pale-pink-background-color{background-color:var(--wp--preset--color--pale-pink) !important}.has-vivid-red-background-color{background-color:var(--wp--preset--color--vivid-red) !important}.has-luminous-vivid-orange-background-color{background-color:var(--wp--preset--color--luminous-vivid-orange) !important}.has-luminous-vivid-amber-background-color{background-color:var(--wp--preset--color--luminous-vivid-amber) !important}.has-light-green-cyan-background-color{background-color:var(--wp--preset--color--light-green-cyan) !important}.has-vivid-green-cyan-background-color{background-color:var(--wp--preset--color--vivid-green-cyan) !important}.has-pale-cyan-blue-background-color{background-color:var(--wp--preset--color--pale-cyan-blue) !important}.has-vivid-cyan-blue-background-color{background-color:var(--wp--preset--color--vivid-cyan-blue) !important}.has-vivid-purple-background-color{background-color:var(--wp--preset--color--vivid-purple) !important}.has-black-border-color{border-color:var(--wp--preset--color--black) !important}.has-cyan-bluish-gray-border-color{border-color:var(--wp--preset--color--cyan-bluish-gray) !important}.has-white-border-color{border-color:var(--wp--preset--color--white) !important}.has-pale-pink-border-color{border-color:var(--wp--preset--color--pale-pink) !important}.has-vivid-red-border-color{border-color:var(--wp--preset--color--vivid-red) !important}.has-luminous-vivid-orange-border-color{border-color:var(--wp--preset--color--luminous-vivid-orange) !important}.has-luminous-vivid-amber-border-color{border-color:var(--wp--preset--color--luminous-vivid-amber) !important}.has-light-green-cyan-border-color{border-color:var(--wp--preset--color--light-green-cyan) !important}.has-vivid-green-cyan-border-color{border-color:var(--wp--preset--color--vivid-green-cyan) !important}.has-pale-cyan-blue-border-color{border-color:var(--wp--preset--color--pale-cyan-blue) !important}.has-vivid-cyan-blue-border-color{border-color:var(--wp--preset--color--vivid-cyan-blue) !important}.has-vivid-purple-border-color{border-color:var(--wp--preset--color--vivid-purple) !important}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background:var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background:var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background:var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background:var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background:var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important}.has-cool-to-warm-spectrum-gradient-background{background:var(--wp--preset--gradient--cool-to-warm-spectrum) !important}.has-blush-light-purple-gradient-background{background:var(--wp--preset--gradient--blush-light-purple) !important}.has-blush-bordeaux-gradient-background{background:var(--wp--preset--gradient--blush-bordeaux) !important}.has-luminous-dusk-gradient-background{background:var(--wp--preset--gradient--luminous-dusk) !important}.has-pale-ocean-gradient-background{background:var(--wp--preset--gradient--pale-ocean) !important}.has-electric-grass-gradient-background{background:var(--wp--preset--gradient--electric-grass) !important}.has-midnight-gradient-background{background:var(--wp--preset--gradient--midnight) !important}.has-small-font-size{font-size:var(--wp--preset--font-size--small) !important}.has-medium-font-size{font-size:var(--wp--preset--font-size--medium) !important}.has-large-font-size{font-size:var(--wp--preset--font-size--large) !important}.has-x-large-font-size{font-size:var(--wp--preset--font-size--x-large) !important}:root :where(.wp-block-icon svg){width:24px}:where(.wp-block-post-template.is-layout-flex){gap:1.25em}:where(.wp-block-post-template.is-layout-grid){gap:1.25em}:where(.wp-block-term-template.is-layout-flex){gap:1.25em}:where(.wp-block-term-template.is-layout-grid){gap:1.25em}:where(.wp-block-columns.is-layout-flex){gap:2em}:where(.wp-block-columns.is-layout-grid){gap:2em}:root :where(.wp-block-pullquote){font-size:1.5em;line-height:1.6}.heateor_sss_button_instagram span.heateor_sss_svg,a.heateor_sss_instagram span.heateor_sss_svg{background:radial-gradient(circle at 30% 107%,#fdf497 0,#fdf497 5%,#fd5949 45%,#d6249f 60%,#285aeb 90%)}div.heateor_sss_horizontal_sharing a.heateor_sss_button_instagram span{background:#be3a34 !important}div.heateor_sss_standard_follow_icons_container a.heateor_sss_button_instagram span{background:#be3a34}div.heateor_sss_horizontal_sharing a.heateor_sss_button_instagram span:hover{background:#001d3b !important}div.heateor_sss_standard_follow_icons_container a.heateor_sss_button_instagram span:hover{background:#001d3b}.heateor_sss_horizontal_sharing .heateor_sss_svg,.heateor_sss_standard_follow_icons_container .heateor_sss_svg{background-color:#be3a34 !important;background:#be3a34 !important;color:#fff;border-width:0px;border-style:solid;border-color:transparent}div.heateor_sss_horizontal_sharing span.heateor_sss_svg svg:hover path:not(.heateor_sss_no_fill),div.heateor_sss_horizontal_sharing span.heateor_sss_svg svg:hover ellipse,div.heateor_sss_horizontal_sharing span.heateor_sss_svg svg:hover circle,div.heateor_sss_horizontal_sharing span.heateor_sss_svg svg:hover polygon,div.heateor_sss_horizontal_sharing span.heateor_sss_svg svg:hover rect:not(.heateor_sss_no_fill){fill:#fff}div.heateor_sss_horizontal_sharing span.heateor_sss_svg svg:hover path.heateor_sss_svg_stroke,div.heateor_sss_horizontal_sharing span.heateor_sss_svg svg:hover rect.heateor_sss_svg_stroke{stroke:#fff}.heateor_sss_horizontal_sharing span.heateor_sss_svg:hover,.heateor_sss_standard_follow_icons_container span.heateor_sss_svg:hover{background-color:#001d3b !important;background:#001d3b !important;color:#fff;border-color:transparent}.heateor_sss_vertical_sharing span.heateor_sss_svg,.heateor_sss_floating_follow_icons_container span.heateor_sss_svg{color:#fff;border-width:0px;border-style:solid;border-color:transparent}.heateor_sss_vertical_sharing span.heateor_sss_svg:hover,.heateor_sss_floating_follow_icons_container span.heateor_sss_svg:hover{border-color:transparent}@media screen and (max-width:783px){.heateor_sss_vertical_sharing{display:none !important}}.e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload),.e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload) *{background-image:none !important}@media screen and (max-height: 1024px){.e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload),.e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload) *{background-image:none !important}.e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload).nitro-lazy,.e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload) *.nitro-lazy{background-image:none !important}}@media screen and (max-height: 640px){.e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload),.e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload) *{background-image:none !important}.e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload).nitro-lazy,.e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload) *.nitro-lazy{background-image:none !important}}.e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload).nitro-lazy,.e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload) *.nitro-lazy{background-image:none !important}form.form p.submit{padding-left:0% !important;padding-right:0% !important}.basic-yop-poll-container[data-uid]{max-width:620px !important;margin:10px auto !important;padding:15px !important;border-radius:18px !important;box-shadow:0 20px 50px rgba(0,0,0,.08) !important;border:1px solid #eee !important}.treats-form{height:530px}.ot-datasheet-form{height:640px}.ot-value-plan-form{height:550px !important}.ot-datasheet-form form.form p.submit,.treats-form form.form p.submit{margin:20px auto !important}.basic-yop-poll-container[data-uid] .basic-question-title{font-size:22px !important;font-weight:700 !important;padding:10px !important;border-radius:14px !important;background:linear-gradient(135deg,#be3a34,#d95a55) !important;color:#fff !important;margin-bottom:15px !important}.basic-yop-poll-container[data-uid] .basic-answers{list-style:none !important;padding:0 !important}.basic-yop-poll-container[data-uid] .basic-answer{margin-bottom:10px !important}.basic-yop-poll-container[data-uid] .basic-answer-label{display:flex !important;align-items:center !important;gap:14px !important;padding:10px 12px !important;border-radius:14px !important;border:2px solid #e6e6e6 !important;background:#fafafa !important;cursor:pointer !important;transition:all .3s ease !important}.basic-yop-poll-container[data-uid] input[type="radio"]{transform:scale(1.5) !important;accent-color:#be3a34 !important;cursor:pointer !important}.basic-yop-poll-container[data-uid] .basic-text{font-size:18px !important;font-weight:500 !important;color:#222 !important;line-height:1.4 !important}.basic-yop-poll-container[data-uid] .basic-answer-label:hover{border-color:#be3a34 !important;background:#fff !important;transform:translateY(-3px) !important;box-shadow:0 10px 25px rgba(190,58,52,.15) !important}.basic-yop-poll-container[data-uid] input[type="radio"]:checked+.basic-text{font-weight:700 !important;color:#be3a34 !important}.basic-yop-poll-container[data-uid] .basic-vote-button{display:inline-block !important;padding:10px 20px !important;border-radius:40px !important;background:linear-gradient(135deg,#be3a34,#d95a55) !important;color:#fff !important;font-size:16px !important;font-weight:600 !important;border:none !important;transition:all .3s ease !important}.basic-yop-poll-container[data-uid] .basic-vote-button:hover{background:linear-gradient(135deg,#a8322d,#be3a34) !important;transform:translateY(-3px) !important;box-shadow:0 12px 30px rgba(190,58,52,.25) !important}html,body{overflow-x:hidden}.ot-datasheet-form form p.submit{color:#fff;margin:20px auto !important}@media (max-width: 768px){.blog-template-default table{display:block;width:100%;overflow-x:auto;white-space:nowrap}.ot-datasheet-form,.treats-form{height:auto}.ot-datasheet-form form.form p .field-label,.treats-form form.form p .field-label{width:90% !important}.ot-datasheet-form iframe{height:590px !important}.treats-form iframe{height:390px !important}.ot-datasheet-form,.treats-form{position:relative;top:0px !important}}.tablepress>:where(thead,tfoot)>*>th{font-size:15px;white-space:nowrap}.tablepress .sorting{background-color:#732225;color:#fff}.tablepress .sorting:hover{background-color:#732225;color:#fff}.tablepress thead .dt-orderable-asc:hover,.tablepress thead .dt-orderable-desc:hover{background-color:#b04439 !important}.tablepress th{background-color:#eadedf !important}@media (min-width: 768px){.fixed-bar__nav li{padding:0 15px}}.fixed-bar__nav{font-size:11px;line-height:1;font-weight:400;flex-wrap:nowrap;text-transform:uppercase}.mitre-technique-table{overflow:auto;width:100%}.mitre-technique-table table{border:1px solid #2b2b2c;height:100%;width:100%;table-layout:fixed;border-collapse:collapse;border-spacing:1px;text-align:left}.mitre-technique-table caption{caption-side:top;text-align:left}.mitre-technique-table th{border:1px solid #2b2b2c;background-color:#fff;color:#000;padding:8px}.mitre-technique-table td{border:1px solid #2b2b2c;padding:8px}.mitre-technique-table tr:nth-child(even) td{background-color:#fff;color:#000}.mitre-technique-table tr:nth-child(odd) td{background-color:#c7c7c7;color:#000}.fixed-bar--pink .fixed-bar__title:before{background:#b04439 !important}.btn{background:darkred;color:#fff;font-weight:bold;border-color:darkred}.btn:hover{background:red;color:#fff;border-color:red}#dabar{display:none !important}#dabar{background:#2c3644;color:#fff;font-size:16px;top:0px;left:0px;width:100% !important;padding:10px 0px;text-align:center}#dabar a{color:#fff;border-bottom:1px dotted}.form-wrap--bg{padding:60px 0;font-size:16px;color:#fff}.form-wrap--bg:after{content:"";position:absolute;top:0;left:0;right:0;bottom:0;background-color:#363461}.elementor-9944 .elementor-element.elementor-element-489f564{--display:flex;--flex-direction:column;--container-widget-width:100%;--container-widget-height:initial;--container-widget-flex-grow:0;--container-widget-align-self:initial;--flex-wrap-mobile:wrap;border-style:solid;--border-style:solid;border-width:0px 0px 1px 0px;--border-top-width:0px;--border-right-width:0px;--border-bottom-width:1px;--border-left-width:0px;border-color:#b2b2b2;--border-color:#b2b2b2;--border-radius:0px 0px 0px 0px;--padding-top:0px;--padding-bottom:30px;--padding-left:0px;--padding-right:0px}.elementor-widget-theme-post-title .elementor-heading-title{font-family:var(--e-global-typography-primary-font-family),Sans-serif;font-size:var(--e-global-typography-primary-font-size);font-weight:var(--e-global-typography-primary-font-weight);color:var(--e-global-color-primary)}.elementor-9944 .elementor-element.elementor-element-ed91a26 .elementor-heading-title{font-family:"Jost",Sans-serif;font-size:22px;font-weight:500;line-height:31px;color:var(--e-global-color-secondary)}.elementor-widget-button .elementor-button{background-color:var(--e-global-color-accent);font-family:var(--e-global-typography-accent-font-family),Sans-serif;font-weight:var(--e-global-typography-accent-font-weight)}.elementor-9944 .elementor-element.elementor-element-9b79ec2 .elementor-button{background-color:var(--e-global-color-secondary);font-family:"Lato",Sans-serif;font-weight:500;text-transform:uppercase;padding:12px 12px 12px 12px}.elementor-9944 .elementor-element.elementor-element-9b79ec2 .elementor-button:hover,.elementor-9944 .elementor-element.elementor-element-9b79ec2 .elementor-button:focus{background-color:var(--e-global-color-primary)}@media (max-width:1024px){.elementor-widget-theme-post-title .elementor-heading-title{font-size:var(--e-global-typography-primary-font-size)}}@media (max-width:767px){.elementor-widget-theme-post-title .elementor-heading-title{font-size:var(--e-global-typography-primary-font-size)}}