Netwitness 11.2 - ESA Rules
we are now configuring netwitness 11.2 and on "ESA rules" tab under "Configure" we have no rules yet.
I was wondering if there is a set of baseline rules that can be implemented instantly, instead of
adding each rule individually (similar to just simple, 'regular', out-of-the-box default rules).
did someone has performed this before and can help?
- Community Thread
- ESA Rules
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform
Use RSA live to subscribe to the current OOTB ESA rules that are available to you
deploy to your ESA library then push selected to the ESA collection
RSA Content for the RSA NetWitness Platform - ESA content