RSA Admin

Basic Event Correlation Rules

Discussion created by RSA Admin Employee on Aug 27, 2012

The release of Nextgen 9.8 brings with it the capability to use Basic Event Correlation Rules on decoders, logdecoders and concentrators.  Attached you will find a presentation that provides an overview of this new functionality.  I would really appreciate feedback on the presentation.  We will be providing some out of the box BEC rules in the near future that can be received via Live.


Also, I will be presenting this and other NWFL items at the Netwitness Users Conference, so if you haven't registered please do so and I will see you there.







Paul W. Stoecker, Ph.D.

Principal Software Engineer

Content Analytics Research Team

RSA, The Security Division of EMC

o: 508.599.2743 | c: 302.379.3375 | e:<