In RSA NetWitness 11.4 the Events workflow now provides analysts query hints to help them complete queries. The query hints can even provide answers to questions analysts may have from the data in their environment prior to even executing a query.
Check it out and let me know what you think!
Please leave any feedback or suggestions on how to make this experience even better. To see what else may be in store for future releases, go to the RSA Ideas portal to see enhancements that have been suggested, vote on them, and submit your own.