The RSA NetWitness Platform Content Creation training course provides recommended methodologies for creating content to assist you in discovering, analyzing and resolving threats in RSA NetWitness Platform.
By attending RSA NetWitness Platform Content Creation workshop, delegates will learn to:
- Identify what content to use when
- Describe the data model and process flow
- Describe how to optimize content for performance and results
- Monitor the performance of parsers
- Create content for specific use cases
- Create content from LIVE and other sources, such as STIX feeds
- Create content using a recommended process
- Create an alert taxonomy
- Use reports to test the efficacy of rules
- Create content for current threats
- Whitelist normal traffic and false positives
Attend RSA NetWitness Platform Foundations training or equivalent knowledge
This RSA NetWitness Platform Content Creation class is intended for Anyone interested in creating content in RSA NetWitness to highlight and discover potential threats.