RSA Admin

RSA Live March Content Announcement

Blog Post created by RSA Admin Employee on Mar 26, 2015

RSA Security Analytics customers,

RSA is pleased to announce the addition of new and updated content to the RSA Live Content Library. New content added to RSA Live during the month of March:


  • 2 new Application rules for detecting internal web traffic to remote administration tools
  • 29 Updates to Event Streaming Analysis (ESA) rules to provide more targeted rule logic
  • 5 Lua parser updates
  • New Log parser support for Entrust Identity Guard
  • 40 Log parser updates that improve parsing accuracy and support newer versions of event sources



You can find our latest content catalog here:


Additionally, the RSA Content Team will continue our intensive review of our current ESA rule library.  This effort means there will be less noise and more targeted intelligence with our ESA (correlation) rules.


If you have an interesting use case for a piece of content, let us know about it by mailing us at:



The ASOC Content Team