As a part of RSA NetWitness 11.4 the Events workflow now provides analysts the ability to execute free-text searches along with structured queries. Free-text searches get results without requiring analysts to know the NetWitness query language.
Take a gander and let me know what you think!
Please leave any feedback or suggestions on how to make this experience even better. To see what else may be in store for future releases, go to the RSA Ideas portal to see enhancements that have been suggested, vote on them, and submit your own.