The release of Nextgen 9.8 brings with it the capability to use Basic Event Correlation Rules on decoders, logdecoders and concentrators. Attached you will find a presentation that provides an overview of this new functionality. I would really appreciate feedback on the presentation. We will be providing some out of the box BEC rules in the near future that can be received via Live.
Also, I will be presenting this and other NWFL items at the Netwitness Users Conference, so if you haven't registered please do so and I will see you there.
Paul W. Stoecker, Ph.D.
Principal Software Engineer
Content Analytics Research Team
RSA, The Security Division of EMC