Skip navigation
All Places > Products > RSA NetWitness Platform > Blog > Author: JasonR6

RSA NetWitness Platform

1 Post authored by: JasonR6

Great report entitled Detecting APT Using Anomalous Windows Remote Management Methods and Dynamic RPC Endpoint Mapping produced by RSA's Incident Response Team. The paper discusses techniques attackers utilize to work in plain sight by exploiting common management functions.  The report does a great job discussing techniques to help detect these tactics as well. Also attached is a digital appendix that includes a parser for RSA Security Analytics.

Filter Blog

By date: By tag: