RSA NetWitness 11.5 Documentation - Configure & Manage

[#1]

Configure Basic Services

Understand Hosts and Services

Deploy a Host and Install Services

Configure Live Services

Configure Live Services

Configure Network Data (Packet) Capture

Configure a Network Decoder to Capture Data

Configure a Broker or Concentrator to Aggregate Data

Start and Stop Data Capture

Filter Unwanted Data and Set Up Rules for Alerting

Configure Feeds and Parsers

Configure Log Collection

Configure a Log Decoder to Capture Data

Configure Basic Log Collection

Configure Supported Event Sources

Configure Event Sources for Log Collection

Configure the Windows Legacy Collector

Customize Log Parsers

Use the Log Parser Tool to Edit Log Parsers (Advanced)

Archive Log Data

Enable Endpoints for Log Collection

Integration with LogStash

Event Export Connector Installation and Configuration Guide

Configure Endpoint Data Collection

Configure the Endpoint Log Hybrid for Endpoint Data Collection

Forward Endpoint Data to a Log Decoder

Define Agent Behavior

Set Up NetWitness Endpoint for Risk Score Calculation

Install and Configure a Relay Server to Monitor Endpoints outside Your Network | (Video)

Configure UEBA

Configure UEBA 

Configure Real-Time Analysis with ESA and Enrichment Lookup

Configure Event Stream Analysis

Review Best Practices for Writing and Defining ESA Correlation Rules

Configure Enrichment Lookup Capability

Configure Incident Management Capability

Configure Incident Response Settings

Configure Application Settings and Dashboards

Configure Access, Notification, Logging, Investigation, Live, and Syslog Settings

Configure Your Dashboard

Review the Dashboards Catalog

Configure Reports

Set Up RSA NetWitness for Report Generation

Configure and Generate Reports

Review RSA NetWitness Reports

Review Core Compliance Reports

Configure Security and User Access

Secure the RSA NetWitness Platform Network (Maintenance Contract Required)

Set Up System-Level Security Settings

Change the Default Admin Password

Configure External Authentication

Configure PKI Authentication

Use a Custom Server Certificate

Manage Users with Roles and Permissions

Implement Data Privacy

Configure Audit Logging and Notifications 

Configure Global Audit Logging

Configure Centralized Audit Logging

Maintain the System

Monitor Health and Wellness Using NetWitness Platform

Monitor Health and Wellness Using Kibana

Reissue Certificates

Track License Usage

Tune Core Database Performance

Manage Periodic Backups and Incidental Restoring