RSA NetWitness Logs WinRM Configuration and Troubleshooting

Document created by Elizabeth Maloney Employee on Jul 20, 2016Last modified by Connor Mccarthy on Apr 17, 2018
Version 7Show Document
  • View in full screen mode

Register Now

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

 

Summary

This on-demand learning provides an introduction to troubleshooting RSA NetWitness Logs & Network.

 

Overview
This on-demand learning provides students with training on a tool to assist in both configuring and troubleshooting WinRM event sources for RSA NetWitness Logs using an automated script. Students will also receive an overview of the Kerberos authentication protocol.


Audience
Anyone interested in configuring and troubleshooting RSA NetWitness WinRM event sources.

 

Delivery Type
On-Demand Learning


Duration
120 minutes


Prerequisite Knowledge/Skills
Students should have completed the following training (or have equivalent knowledge) prior to taking this training:

  • RSA NetWitness Logs and Packets Foundations
  • RSA NetWitness Logs and Packets Core Admin or RSA NetWitness for Logs

 

Learning Objectives
Upon successful completion of this course, participants should be able to:

  • Describe the key aspects of the Kerberos authentication protocol
  • Configure a WinRM event source using a provided script
  • Troubleshoot a WinRM event source using a provided script
  • Deploy a WinRM event source configuration to multiple hosts using a script in Global Policy Orchestrated mode

 

Course Outline

 

Module 1 – Kerberos Overview

  • Definition
  • Benefits
  • Kerberos protocol concepts and terms
  • Kerberos Configuration
  • Kerberos authentication and authorization

 

Module 2 – Configuring a WinRM Event Source

  • Script Overview
  • Configuring a WinRM event source using a script
  • Configuring a WinRM event source in GPO mode using a script

 

Module 3 – Troubleshooting Windows Collection

  • Troubleshooting a WinRM event source

 

 

Register Now

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

Attachments

    Outcomes