SANS Review of RSA NetWitness Platform

As part of its review of the RSA NetWitness Platform, SANS simulated an encoded reverse shell attack and used the platform to detect and investigate it.