AnsweredAssumed Answered

Obtain Incidents and Alerts from NetWitness

Question asked by Stav Sapir Employee on May 3, 2018

Hi,

 

what is the best practice to obtain Incidents and Alerts from NetWitness programmaticly?

from REST API or some forward publish (message broker and etc..) API?

 

for example simple use case:

 

1. events flow to NetWitness

2. one of the rules create an alert and incident

3. incident and alert sent to 3rd party application, or pulled by query.

Outcomes