This guide provides an overview of Security Analytics access to Security Analytics Live. RSA Security Analytics Live is the gateway to a rich environment that offers access to feeds, tools, and other resources.
Live Content in Security Analytics
Live is the component of Security Analytics that manages communication and synchronization between Security Analytics services and a library of Live content available to RSA Security Analytics customers. Live provides a simple interface for browsing, selecting, and deploying content from the Security Analytics Live Content Management System to Security Analytics services and software. In addition to managing feeds from the CMS Library, Live allows users to deploy custom feeds and packages.
The CMS Library
The content management system (CMS) library (known as Live) is a valuable source of the latest internet security resources for Security Analytics customers. It provides a view into the collective intelligence and analytical skills of the worldwide security community to ensure that users have the most current visibility into attack vectors.
Live gathers the best advanced threat intelligence and content in the global security community - the ideas, research, ongoing tracking, and analysis - and brings it directly into the user’s security operations center to definitively classify computers associated with botnets, malware, and other malicious exploits. Live aggregates, consolidates, and illuminates only the most pertinent information relevant to an organization on a real-time basis.
Before you can access CMS, you must configure the connection and initiate the synchronization between the CMS server and Security Analytics.
Live Resource Management Checklist
After reviewing this topic the administrator will have full understanding of how to set up Live in Security Analytics, how to search for resources in Live, and how to Manage Live resources.
Set Up Live on Security Analytics by configuring a connection with the CMS server.
Use the Live Search View to Search for Live Resources.
- Add Subscribed Resources for Deployment to Services
- Create a Resource Package
- Delete a Subscription
- Deploy Resources in Live
- Deploy Live Resources Using Deployment Wizard
- Deploy Resource to Services
- Deploy Resources from a Resource Package
- Deploy Resources Manually
- Display Resource Details in Live Resource View
- Download a Resource
- Locate and Remove a Deployed Resource from Services
- Manage Custom Feeds
- Create a Custom Feed
- Create an Identity Feed
- Edit a Feed
- Remove a Feed
- Show Results as a Grid or in Detail
- Subscribe and Unsubscribe to a Resource
- View Detail of a Subscribed Resource in the Resource View
- View Subscribed Resources Selected to Deploy on Services