RSA NetWitness
The revolutionary approach to network monitoring
RSA NetWitness: A revolutionary network security monitoring platform that provides enterprises with situational awareness of everything happening on the network to solve a wide range of information-security challenges.
Achieve Pervasive Visibility
Obtain situational awareness into the content of all network traffic and discrete behavior of entities operating across the network.
Detect Advanced Threats
Identify insider threats, zero-day exploits and targeted malware, advanced persistent threats, fraud, espionage, data exfiltration, and continuous monitoring of security controls.
Obtain Actionable Intelligence
Perform real-time, free-form contextual analysis of network and log data captured and reconstructed by the NetWitness network security monitoring platform.
INCREASE SECURITY OPERATIONS CENTER AGILITY
Leverage the scalability and powerful analytics of the NetWitness platform to automate processes, reduce incident time, and adapt to changing threats.
Platform
The RSA NetWitness platform offers a scalable, distributed infrastructure with real-time fusion of global threat intelligence that adapts to changing operational requirements.
-
RSA NetWitness Decoder
Capture, reconstruct, and sessionize all network traffic up to Layer 7 enabling users to collect, filter, and analyze data in infinite dimensions. -
RSA NetWitness Concentrator and RSA NetWitness Broker
Index metadata extracted from network traffic across the RSA NetWitness infrastructure for enterprise-wide querying and real-time analytics while facilitating reporting and alerting. -
RSA NetWitness Capacity
Deploy a modular-capacity architecture, via direct-attached capacity or SAN, that adapts to your security and data-retention demands.
Applications
The RSA NetWitness application suite provides a powerful analytical workbench to investigate incidents, identify advanced threats on your network, and answer security questions.
-
RSA NetWitness for Logs
Deliver innovative security analytics in a merged view of network and log data sources with external threat intelligence over a scalable platform. -
RSA NetWitness Informer
Provide enterprisewide visualization, alerting, reporting, and trending for every session, communication, service, application, and user activity. -
RSA NetWitness Investigator
Perform real-time, free-form contextual analysis of network data captured and sessionized by RSA NetWitness. -
RSA NetWitness Live
Fuse global security intelligence with network traffic in real time to definitively classify assets associated with zero-day and advanced threats. -
RSA NetWitness SIEMLink
Enable instant integration of the RSA NetWitness network-monitoring platform with SIEM and other existing enterprise security technologies. -
RSA NetWitness Spectrum
Extract every executable automatically and analyze utilizing distinct investigation techniques for identification of malware, APTs, and zero-day threats. -
RSA NetWitness Visualize
Render any object such as audio, documents, images, and video on the network for security visualization and interrogation over large data volumes.
Resources
Analyst Reports
-
Forrester
Build Security into Your Network’s DNA—The Zero Trust Network Architecture -
451 Group
Can I Get a NetWitness? I Once Was Blind, But Now I See
White Papers
-
Data Driven Security
Data Driven Security—The Time is Now -
Incident Response
React Faster and Better—New Approaches for Advanced Incident Response -
Continuous Monitoring
A Real-Time Approach to Continuous Monitoring
Videos
Customer Profiles
- Case Study of Advanced Information Security
- A Financial Services Customer Success Story
- A United States Government Case Study
Data and Spec Sheets
News
Learning & Events
Learn
-
Presentation
The Three Challenges of Cyberspace -
Presentation
Making Tough Decisions -
Instructional Video
RSA NetWitness Investigator Tutorials
Freeware
Download a freeware version of RSA NetWitness Investigator, the award-winning interactive threat-analysis application of the NetWitness enterprise network-monitoring platform. Investigator Freeware includes access to select daily threat intelligence from RSA NetWitness Live, an online, 24x7 data service.
Analyze network traffic with Investigator Freeware on your PC without needing to install any other RSA NetWitness components.
