What is RSA NetWitness Logs
RSA NetWitness Logs architecture
RSA NetWitness Logs Data flow
Log Deployment scenarios
RSA NetWitness Logs user interface
Customizing the interface
Administration Module Overview
Configuring Event Stream Analysis (ESA)
Configuring Incident Management
Configuring the Reporting Engine
Configuring the Archiver
Configure the Context Hub
Explain the licensing model
Configuring Data Privacy
Setting up capture for log data
Setting up event source monitoring
Troubleshooting event source collection
Setting up collection for:
Validating data capture
Configuring log collection
What is metadata?
Differentiating between the packets and logs
Differentiating between data and metadata
Customizing the investigation screens
Viewing reconstructed events
How to Write queries simple and complex
Describing the purpose of meta key indexing
Customizing data and meta data displays
Creating data visualizations of RSA NetWitness Logs and Packets Training
Creating meta groups
Custom column groups Creation
Using complex queries, drills and views to perform investigations
Reporting data sources
Role Based Access Control
Creating compliance reports
Deploying compliance reports from Live
Filtering data with rules
Metadata Taxonomy concepts
parsers populate meta keys Description
Using alerts and metadata to investigate potential threats
Using Application rules to create new meta
Using Correlation rules to create new meta
Deploying content from RSA Live to create new meta
Determining the cause of an incident
The meta framework
Introduction to parsers
Creating a log parser using ESI
Deploy a log parser
Debugging log parsers
Have any queries regarding course curriculum, speak to our course advisorConnect with Advisor
Successfully complete your course and let the community know about your achievement.
Trainer will cover all the topics related to Certification.
Don’t just show off your achievement to the community, use it to advance in your career.
Have questions? We’ve got the answers. Get the details on how you can grow in this course.
Yes, you get two kinds of discounts. They are group discount and referral discount. Group discount is offered when you join as a group, and referral discount is offered when you are referred from someone who has already enrolled in our training.
Yes, we will discuss with our instructor and will schedule according to the time convenient to you.
The trainer will give Server Access to the course seekers, and we make sure you acquire practical hands-on training by providing you with every utility that is needed for your understanding of the course.
The trainer is a certified consultant and has significant amount of experience in working with the technology.
We will take care of providing you with all that is required to get placed in a reputed MNC and also forward your resume to the companies we tie-up with. Starting from providing the in-depth course material to explanation of the real-time scenarios and preparing your resumes, we will make you gain expertise so that you can get a job.
We assist you completely in acquiring certification. We ensure you will get certified easily after our training.
Yes, we accept payments in two installments.
If you are enrolled in classes and/or have paid fees, but want to cancel the registration for certain reason, it can be attained within first 2 sessions of the training. Please make a note that refunds will be processed within 30 days of prior request.
Our trainer explains every topic along with real-time scenarios. In the last one or two sessions, the trainer will explain one end-to-end project to showcase the real time working environment.
Have More Questions. Reach our Support TeamContact us
See if this course is a fit for you by joining us for an online info session. You’ll meet our team, get an overview of the curriculum and course objectives, and learn about the benefits of being a student at Mindmajix
Attend a Demo Session | Meet the Expert Who Can Kickstart Your Career in RSA Netwitness
By providing us with your details, We wont spam your inbox.