Live: Live Content in Security Analytics

Document created by RSA Information Design and Development on Sep 12, 2017Last modified by RSA Information Design and Development on Mar 27, 2018
Version 11Show Document
  • View in full screen mode

RSA NetWitness Suite Live is the gateway to a rich environment that offers access to feeds, tools, and other resources. 

NetWitness Suite Live

Live is the component of NetWitness Suite that manages communication and synchronization between NetWitness Suite services and a library of Live content available to RSA NetWitness Suite customers. Live provides a simple interface for browsing, selecting, and deploying content from the NetWitness Suite Live Content Management System to NetWitness Suite services and software. In addition to managing feeds from the CMS Library, Live allows users to deploy custom feeds and packages.

The CMS Library

The content management system (CMS) library (known as Live) is a valuable source of the latest internet security resources for NetWitness Suite customers. It provides a view into the collective intelligence and analytical skills of the worldwide security community to ensure that users have the most current visibility into attack vectors.

Live gathers the best advanced threat intelligence and content in the global security community - the ideas, research, ongoing tracking, and analysis - and brings it directly into the user’s security operations center to definitively classify computers associated with botnets, malware, and other malicious exploits. Live aggregates, consolidates, and illuminates only the most pertinent information relevant to an organization on a real-time basis.

NetWitness Suite Feedback and Data Sharing

Live Feedback is intended to help improve RSA NetWitness Suite. Once you set up and configure a Live account, usage data is shared with RSA.

RSA Live Connect is a cloud based threat intelligence service. This service collects, analyzes, and assesses threat intelligence data such as IP addresses, domains, and files collected from various sources. It Threat Insights, which provide analysts the ability to pull threat intelligence data from the Live Connect service. It also offers Analyst Behaviors, an automated data collection service with the goal of sharing potential threat intelligence for analysis.

For more details, see NetWitness Suite Feedback and Data Sharing.

You are here
Table of Contents > Live Content in NetWitness Suite