RSA NetWitness WinRM Event Source Troubleshooting

Document created by Matthew Bradley Employee on Nov 20, 2018Last modified by Matthew Bradley Employee on Nov 20, 2018
Version 2Show Document
  • View in full screen mode

Access Training

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

 

Summary

This on-demand learning provides students with training on a tool to assist in both configuring and troubleshooting WinRM event sources for RSA NetWitness Logs using an automated script Students will also receive an overview of the Kerberos authentication protocol.

 

Audience

All - Anyone interested in configuring and troubleshooting RSA NetWitness WinRM event sources.

 

Delivery Type
On-Demand Learning


Duration
2 Hours


Prerequisite Knowledge/Skills

Students are encouraged to consume the following courses:

• RSA NetWitness Logs and Network Foundations

• RSA NetWitness Logs and Network Core Administration

• RSA NetWitness Event Source Configuration

 

Learning Objectives

Upon successful completion of this course, participants should be able to:

• Explain how the Kerberos authentication protocol functions

• Configure a Windows event source using a PowerShell script

• Perform a mass enablement of multiple machines using a Group Policy Object (GPO)

• Troubleshoot a Windows event collection

 

Course Outline

Module 1: Kerberos Overview

• Definition

• Benefits

• Kerberos protocol concepts and terms

• Kerberos Configuration

• Kerberos authentication and authorization

 

Module 2: Configuring Windows Collection Using a Script

• Script Overview

• Configuring a WinRM event source using a script

• Configuring a WinRM event source in GPO mode using a script

 

Module 3: Troubleshooting Windows Collection

• Troubleshooting a WinRM event source

 

 

 

 

 

Access Training

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

Attachments

    Outcomes