Pages
- About Us
- Beyond the Playbook: How to Properly Leverage the MITRE ATT&CK Framework
- Black Hat 2024
- Black Hat 2024 Dinner Party
- Building Your Ransomware Preparedness Plan
- Connect with NetWitness at RSAC 2025!
- Contact Us
- Defense Accelerated: How NetWitness is Revolutionizing Threat Detection, Investigation and Response
- Defense Accelerated: NetWitness Product Update
- Defense Accelerated: NetWitness Product Update On-Demand
- Die Neue Dimension der Cybersicherheit
- Documentation
- FIN13 (Elephant Beetle): Viva la Threat!
- FirstWatch
- FirstWatch: Threat Intelligence Summary Briefing
- FirstWatch: Threat Intelligence Summary Briefing – Volume 3
- FirstWatch: Threat Intelligence Summary Briefing – Volume 4
- FirstWatch: Threat Intelligence Summary Briefing – Volume 5
- FirstWatch: Threat Intelligence Summary Briefing – August 2024
- Harnessing Generative AI: Revolutionizing Cybersecurity Against Modern Threats
- Home
- La Nouvelle Frontière de la Cybersécurité
- La Nuova Frontiera della Cybersecurity
- Modules
- NDR Landing Page
- NetWitness and KuppingerCole
- NetWitness Materials
- NetWitness Platform Demo 12.5
- NetWitness RSA Booking
- Partner Finder
- Partners
- Race to Excellence with NetWitness
- Race to Excellence: Formula 1 Experience and NetWitness Insights
- Resources
- Analyst Reports
- Articles
- Case Studies
- Data Sheets
- E-Books
- 20 Questions to Ask When Evaluating a Next-Gen SIEM
- Fortifying Cyber Defense: The Synergy of Threat Intel & Incident Response
- From Detection to Defense: Mastering Incident Response for Network Resilience
- Make Way for the Intelligent SOC
- Make Way for the Intelligent SOC
- Practical Approaches to Unleashing Autonomous AI Defenders
- Events
- FirstWatch
- Infographics
- Videos
- Webinars
- Beyond the Playbook: How to Properly Leverage the MITRE ATT&CK Framework
- Building Your Ransomware Preparedness Plan
- Casinos Don’t Gamble with Cybersecurity
- Cyber Attack Trend: Misuse of Native IT Tools and Living Off the Land Attacks
- Defense Accelerated: NetWitness Product Update On-Demand
- FirstWatch: Threat Intelligence Summary Briefing – August 2024
- FirstWatch: Threat Intelligence Summary Briefing – July 2024
- FirstWatch: Threat Intelligence Summary Briefing – Volume 3
- FirstWatch: Threat Intelligence Summary Briefing – Volume 4
- Fortifying Cyber Defense: The Synergy of Threat Intel & Incident Response
- From Chatbot to Cyber Threat: How Threat Actors are Leveraging ChatGPT
- Harnessing Generative AI: Revolutionizing Cybersecurity Against Modern Threats
- NetWitness Foundations: Leveraging Threat Research
- NetWitness Red Team: A Guide to Outwit MFA
- SASE Visibility for the SOC
- Tales from the Dark Side – Episode 2: Checkmate! The tale of a zero-day Check Point vulnerability in the hands of an actor
- Tales from the Dark Side – Episode 1: The Ivanti Global Attack
- Tales from the Dark Side – Episode 1: The Ivanti Global Attack
- Tales from the Dark Side: Episode 3 – Lost Relics of Atlantida
- Tales from the Dark Side: Episode 4 – FIN7…Destroyed or Thriving?
- Tales from the Dark Side: Episode 5, Pt. 1 – The Tale of a Panda Who Makes Clouds Cry
- Tales from the Dark Side: Episode 8A – Investigating Volt Typhoon
- The Intelligent SOC: Fusion Methodology at the Intersection of Intelligence, Context, and Action in Modern Enterprises
- Threat Intelligence: The Key to Higher Security Operation Performance On-Demand
- What is SASE? A Q&A with NetWitness Experts
- Your Network at a Glance: Using Visualizations to Dive into Investigations
- Whitepapers
- FIN13 (Elephant Beetle): Viva la Threat! Anatomy of a Fintech Attack
- Rolling the Dice: Ransomware in the Gaming Industry Anatomy of Two Online Security Attacks
- SASE Tool Integration with NetWitness
- Security and AI: What’s Hype and What’s Real? Uncover the Dual Nature of AI in Cybersecurity
- The Generative AI Security Race: Are You Positioned to Win? Explore the evolving world of ‘GenAI’ security threats and defenses
- Threat Intelligence: The Key to Higher Security Operation Performance
- Services
- SIEM Landing Page
- Sitemap
- Solutions
- Standard Form Agreements
- Support
- Tales from the Dark Side – Episode 1: The Ivanti Global Attack
- Tales from the Dark Side – Episode 2: Checkmate! The tale of a zero-day Check Point vulnerability in the hands of an actor
- Tales from the Dark Side Episode 6: Double Trouble: Facing Dragons and Bears in the Cloud
- Tales from the Dark Side: Episode 3 – Lost Relics of Atlantida
- Tales from the Dark Side: Episode 4 – FIN7…Destroyed or Thriving?
- Tales from the Dark Side: Episode 5, Pt. 1 – The Tale of a Panda Who Makes Clouds Cry
- Content Center
My Templates
Blog
- Cloud SIEM Security: What to Expect in the World of Hybrid Infrastructure
- 3 Pillars of the Incident Response Investigation: From Detection to Remediation
- UNC3886 and the Visibility Crisis: How Network Detection and Response (NDR) Reveals What Traditional Security Misses
- The Red Team’s Role in Strengthening Your Incident Response Playbook
- Situational Awareness in Cybersecurity: Why It’s a Key Step in Incident Response
- SIEM Log Management: 6 Mistakes That Could Be Costing You
- What Is SIEM and Why It’s No Longer Enough on Its Own
- Beyond Alert Fatigue: How NDR Solutions Deliver Actionable Insights
- Choosing the Right Incident Response Services for Your Enterprise
- NDR vs EDR: Which One is Right for Your Organization?
- Inside the Incident Response Process: A Step-by-Step Guide for Modern SOCs
- Unlocking Proactive Pre-emptive Cyber Defense: What the NetWitness + BforeAI Integration Means for Real Use Cases Today
- The Importance of NDR Cybersecurity in a Remote Work Environment
- Selecting NDR Solutions: Unlocking Network Visibility Across Hybrid and Multi-Cloud Environments
- What is a Unified Cybersecurity Solution? Why It Matters in 2025?
- 5 Best Practices for Implementing and Optimizing Your NDR Solution
- How NDR Enhances SOC Efficiency with Real-Time Analytics
- Discover How NDR Spots Ransomware Before It Strikes Your Network
- From Webshell to C2: The Evolution of Post-Exploitation and Covert Operations
- Brave the Storm: Surfing the Wake of Salt Typhoon and What We Can and Should Learn From It
- Using NetWitness to Detect Phishing reCAPTCHA Campaign
- NetWitness Product Update: Exciting Innovations in the 12.5 Release
- CVE-2024-24919 in NetWitness Network
- The Sky Is Crying: The Wake of the 19 JUL 2024 CrowdStrike Content Update for Microsoft Windows and What We Should Remember and Take Away From It
- Adaptive Defense: Modernization of Cybersecurity Defense and Management Due to the Inevitable Convergence of IOT, OT and the Enterprise Environment
- Black Hat Asia 2024: Day One
- Packet Capture Tools: The Ultimate Guide to Network Security & Optimization
- The Future of Attack Surface Management: Emerging Trends and Technologies
- Indicators of Compromise (IOCs): A Comprehensive Guide to IOCs in Threat Detection and Response
- Unveiling the Future of Network Security: SASE vs SSE
- PCAP File Guide: Understanding, Opening, and Analyzing Network Data
- Unveiling the Power of Cloud Analytics with NetWitness
- Data Warehouses vs Data Lakes: Navigating the Choice
- Threat Defense Using Threat Intelligence: The Ultimate Guide
- NetWitness, a NOC Partner at Black Hat USA 2023
- Defense of the Digital Realm: Unveiling the Power of Security Operations Centers (SOCs)
- Understanding Network Detection and Response (NDR) and How it Safeguards Your Network
- Deep Packet Inspection (DPI): Enhancing Network Security with NetWitness
- The Importance of Log Management in Cybersecurity: A Comprehensive Guide
- NetWitness EDR vs Open Source EDR: Unlocking Cybersecurity Resilience
- GigaOm’s Radar Report Features NetWitness NDR and SIEM Solutions
- Optimizing Security Operations for Better Cybersecurity Protection
- Exploring the Future of Network Security with SASE Vendors
- Managed SIEM Services: Cybersecurity with Expertise and Efficiency
- NDR Tools for Cybersecurity: Detection and Integration Best Practices
- Understanding Secure Access Service Edge (SASE)
- EDR vs XDR
- The Importance of Incident Response Services
- NetWitness 12.3: Delivering Greater Visibility for Modern Distributed Enterprises
- NetWitness SIEM Log Monitoring: Automation and Real-Time Security Insights
- Network Detection and Response: Strengthen Your Cybersecurity With NetWitness
- Decoding the 2023 SEC Ruling
- Leverage UEBA for Comprehensive Network Security with NetWitness
- Securing Secrets: Insights into Code Obfuscation Techniques
- Inside the SOC with Dave Glover
- A Word from the NetWitness CEO
- Consider Why Your Business Needs Threat Detection
- How NetWitness Orchestrator Can Make Your SecOps More Efficient
- Network Forensic Tools: The Key to Network Forensics
- What is Security Information and Event Management (SIEM) Integration?
- Unlocking the Full Potential of SASE
- What Is SOAR Cyber Security and Why Should You Use It?
- NetWitness is proud to join Black Hat Asia 2023 in the NOC
- Mastering the Art of Incident Response
- Decrypting the Benefits of Proactive Threat Hunting in Encrypted Network Traffic
- What Is Security Automation? Safeguarding Your Business in the Digital Age
- Essential Guide to SIEM SOC Solutions by NetWitness:
- NetWitness FirstWatch Maps Threat Intelligence Content to the MITRE ATT&CK Framework
- Cloud SIEM: A Complete Guide to Modern Threat Detection & Response
- USMS and Broader Implications for Law Enforcement as Ransomware Targets
- Five Thoughts on Take Down of Hive
- An ABC Sampler of Cybersecurity Predictions for 2023: Autonomy, BOMs, CaaS
- The Three Vantage Points of Effective Cybersecurity Awareness Programs
- Make it Costly: How to Deter Threat Actors by Escalating Their Costs
- Moving the XDR Industry Forward with NetWitness Platform XDR 12
- XDR: A New Name and a Major Release
- NetWitness XDR Delivers the Industry’s Most Complete Solution – Today and Tomorrow
- UPDATE: What We Know About the Russia/Ukraine Conflict and How You Should Prepare Your Cybersecurity Capabilities
- A New Path Forward for our Channel Partners
- Understand Performance and Better Organize Threat Data with New NetWitness Orchestrator 6.3
- The Apache Log4j Zero-Day Vulnerability: What You Need to Know
- Could Your Collaboration Tools be Hacker-Friendly?
- NetWitness Cyber Incident Response Services: World Class Threat Hunters Are a Call Away
- Building Your SOAR SOC Solutions Security Strategy
- NetWitness: XDR, Visibility, and the Future of SOCs
- Out of Many Brands, One: A New Day for NetWitness
- NetWitness Orchestrator 6.2: New Features, Better Threat Intelligence
- Ransomware: A Beginner’s Guide to Threat Detection
- XDR and Zero Trust: Partners in Threat Detection
- Introducing NetWitness Ransomware Defense Cloud Services
- Powerful IoT Monitoring and Threat Detection from NetWitness
- A Peek Inside the Black Hat NOC with Grifter
- Defending Against the Latest Ransomware Attacks with NetWitness
- Verifiable Credentials: The Key to Trust on the Next Web
- Your Threat Intelligence Platform is Ready to SOAR
- US Government Continues its Leadership on Cybersecurity and Ransomware
- Secure Code Warrior's Pieter Danhieux: Why the Executive Order on Cybersecurity Can Evolve Developers
- Introducing NetWitness Cloud SIEM: All the Power Without the IT
- What is EDR? Your Guide to Endpoint Detection and Response
- The Biden Administration’s Executive Order on Cybersecurity Represents a Turning Point for the Industry…and the United States
- How Useful Are Your Threat Intelligence Feeds?
- What is XDR (extended detection and response)?
- NetWitness – A Brief History of an Iconic Threat Detection & Response Platform
- SOAR Solutions - Orchestration and Automation without Intelligence is just Dumb
- Securing the IoT Edge Ecosystem
- HAFNIUM Attacks Microsoft Exchange Users
- How RSA NetWitness Platform® Protects against Ransomware Attacks
- Future-Proofing Security Operations Centers
- Introducing RSA NetWitness® Detect AI
- The XDR Perspective: RSA’s View on Extended Detection and Response
- Strategies for Insider Threat Mitigation
- Considerations Towards Enabling A Virtual SOC Environment
- Visibility into the Unknown
- From the Ashes of Disruption Emerges Innovation and New Ways to Work
- Reimagining the SOC for the Future of Work
- The Next Normal Brings Opportunities and Challenges for the CISO
- Managing Digital Risk in a New Age of Internet of Things
- The Changing Face of Insider Threats
- Security Considerations for the Dynamic Workforce
- Announcing the Launch of the RSA IoT Security Monitor
- Operationalizing Incident Response
Analyst Reports
- Your Journey to the Cloud: Challenges & Keys to Securing the Trip
- The Wolf Among Us
- SANS Product Review: RSA NetWitness Platform SIEM and XDR
- RSA Conference 2020 SOC Findings Report - RSA
- RSA Conference 2019: Lessons from Monitoring the Wireless Network
- SANS Product Review Webinar: RSA NetWitness Platform SIEM and XDR
- SANS Review of RSA NetWitness Platform
- RSA NetWitness - It’s About Time Accelerating Threat Detection and Response
- Panel: Remote Workforce Vulnerabilities
- Operationalizing IR: Virtual Workshop
- Managing the Cyber Risks of a Remote Workforce – RSA
- Lunch with the Logfather
- Lean Mean SOC Machine
- Kingslayer - A Supply Chain Attack
- RSA webinar (Italian): Il cybercrime ai tempi del Covid-19
- IoT Security in the Age of Edge Computing
- Intelligent SOC Webcast Series
- Inside the Response to a Unique Carbanak Attack
- Inside the Response of a Unique CARBANAK Intrusion
- Incident Response Services and Your Security Strategy
- Hiding in Plain Sight: The Growth of Cybercrime in Social Media (Part 2)
- Hiding in Plain Sight
- Heads up Hands on Threat Hunting Workshop
- Endpoint Detection and Response: Beyond Antivirus, Proactive Threat Hunting at the Endpoint
- Empowering developers to start left, not just shift left
- Eliminating Access Blind Spots in Today's Modern Enterprise
- Canadian Government Virtual Event: Simulated Attack and Defend with NetWitness XDR
- Building an Intelligent SOC: Test Your Abilities to Handle an Attack
- Breaking Through the Value Ceiling
- Automate Threat Detection and Incident Response: SANS Review of RSA NetWitness
- Adapting Cybersecurity for the New Normal
- 5 Ways to Protect and Optimize Your Workforce
- 5 Ways Threat Intelligence Improves Orchestration and Automation
- 5 Ways the Security Operations Must Evolve for the Next Normal
- 3-Stage Approach to Managing Workforce Risk
- Webinar: 11 Reasons for RSA NetWitness® 11
- Extending the Impact of Security to Accelerate Transformation Webinar
- Buyer’s Guide to Network Detection and Response (NDR) Solutions
Case Studies
- NetWitness and Ooredoo
- Zero Trust and NetWitness
- Defending Against Ransomware Attacks with NetWitness
- Ransomware: A Beginner’s Guide to Threat Detection
- NetWitness Defense Contractor
- NetWitness RC Willey
Tools
Videos
- Exclusive Interview: Practical Approaches to Unleashing Autonomous AI Defenders
- Defense Accelerated: How NetWitness is Revolutionizing Threat Detection, Investigation and Response
- A Word from the NetWitness CEO
- Inside the SOC with Dave Glover
- NetWitness. See Everything. Fear Nothing.
Datasheets
- NetWitness Detect AI - Detect the Undetectable: Smarter, Faster, SaaS-Scalable
- NetWitness Logs - Logs That Listen, Insights That Act
- NetWitness Insight - Discover What You Didn’t Know—Secure What Matters Most
- NetWitness SASE Integration - Break Through SASE Blindspots — Secure Every Connection
- NetWitness Endpoint - Secure Every Endpoint—Anywhere, Anytime
- NetWitness SIEM - See Everything, Miss Nothing: The Power of Evolved SIEM
- NetWitness Incident Response Services - Defend, Recover, Thrive — With Confidence
- Netwitness Platform - Enrich Your Visibility, Accelerate Your Response
News
- Notice - Relocation of Head Office Location
- NetWitness and BforeAI Forge Strategic Partnership to Revolutionize Cybersecurity with Predictive Intelligence
- NetWitness Announces Acquisition by PartnerOne
- NetWitness Provides Business Update: Platform Release and Analyst Report Rankings
- NetWitness and V-Valley Spain and Portugal Enter into Distribution Partnership
- Nozomi Networks and NetWitness Team to Deliver Advanced Cyber Security Solutions to OT & IoT Environments across Critical Infrastructure Systems
- NetWitness Now Supports AWS AppFabric to Improve Security for SaaS Applications
- NetWitness featured as industry leader in NDR and SIEM in 2023 GigaOm Radar Reports
- NetWitness Introduces a Groundbreaking Technology Collaboration
- NetWitness launches 12.3 update, delivering visibility across the entire enterprise
- NetWitness Promotes Abdullah ALSaadoun to Director
- NetWitness Announces Strategic Partnerships With Major SASE Vendors
- NetWitness Announces Distribution Partnership with CyberKnight
- NetWitness Names Tod Ewasko as Chief Product Officer
- NetWitness Announces New Managed Detection and Response Service
- NetWitness Appoints Industry Veteran Ken Naumann as New CEO
- NetWitness Announces New Threat Detection and Intelligence Capabilities with NetWitness Platform XDR 12
- NetWitness Selected by Ubiquo as Exclusive XDR Partner to Provide Integrated and Rapid Threat Detection and Response Against Advanced Attacks
- NetWitness Launches Comprehensive XDR Offerings for Next Generation Security
- NetWitness Taps Maddalena Pellegrini to Manage Sales for Europe South Region
- NetWitness Incident Response Team Urges Enterprises to Prepare for Potential Cyberattacks Related to Russia/Ukraine Conflict
- NetWitness Announces a Distribution Partnership with Exclusive Networks to Bring Leading Threat Detection and Response Solutions to Middle East-based Enterprises
- NetWitness Selected by SafeLine as Exclusive XDR Partner to Provide Integrated and Rapid Threat Detection and Response Against Advanced Attacks
- NetWitness Launches New Partner Program for Resellers, Distributors and MSSPs
- NetWitness Appoints Abdullah ALSaadoun as Regional Manager for Saudi Arabia & the Gulf Cooperation Council
- NetWitness and Datashield Collaboration Mitigates Impact of Log4j Java Security Vulnerability
- NetWitness Appoints Cybersecurity Industry Veteran to Lead Incident Response Services in EMEA Region
- NetWitness Appoints Karim Abillama to Lead International Presales Team
- NetWitness Bolsters Sales Organization with Key Appointment in EMEA Region
- NetWitness® Ransomware Defense Cloud Service Helps Enterprises Avoid and Mitigate the Impact of Ransomware Attacks
- NetWitness® IoT Provides Enterprises with Threat Monitoring and Behavioral Detection Across Their Internet of Things and Operational Technology Systems