RSA NetWitness Logs and Packets decoders are responsible for the real-time collection of network data. The decode captures data in real time and can normalize and reconstruct data for full session analysis. In addition, the decoder can collect flow and endpoint data.
RSA NetWitness Packets and Logs
- Details
- Content
- Dependencies
- Version History
RSA NetWitness Logs and Packets decoders are responsible for the real-time collection of network data. The decode captures data in real time and can normalize and reconstruct data for full session analysis. In addition, the decoder can collect flow and endpoint data.
Integrations
| Name | Description |
|---|---|
| RSA NetWitness Packets and Logs |
Automations
| Name | Description |
|---|---|
NetwitnessSearch | Deprecated. No available replacement. Searches for matches in session/packet content |
| NetwitnessQuery | Deprecated. No available replacement. Performs a query against the meta database |
Integrations
| Name | Description |
|---|---|
| RSA NetWitness Packets and Logs | RSA NetWitness Logs and Packets decoders are responsible for the real-time collection of network data. The decode captures data in real time and can normalize and reconstruct data for full session analysis. In addition, the decoder can collect flow and endpoint data. |
Automations
| Name | Description |
|---|---|
NetwitnessSearch | Deprecated. No available replacement. Searches for matches in session/packet content |
| NetwitnessQuery | Deprecated. No available replacement. Performs a query against the meta database |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (37)
1.0.4 - R2411339 (February 14, 2022)
Scripts
NetwitnessSearch
- Deprecated. No available replacement.
NetwitnessQuery
- Deprecated. No available replacement.
1.0.3 - R2146019 (December 21, 2021)
Scripts
NetwitnessQuery
- Updated the Docker image to: demisto/python:2.7.18.24398.
NetwitnessSearch
- Updated the Docker image to: demisto/python:2.7.18.24398.
1.0.2 - 7567740 (September 12, 2021)
Scripts
NetwitnessQuery
- Updated the Docker image to: demisto/python:2.7.18.24066.
NetwitnessSearch
- Updated the Docker image to: demisto/python:2.7.18.24066.
1.0.1 - 394234 (July 7, 2021)
Scripts
NetwitnessSearch
- Updated the Docker image to: demisto/python3:3.9.5.21272.
NetwitnessQuery
- Updated the Docker image to: demisto/python3:3.9.5.21272.
1.0.0 - 394036 (December 7, 2020)
RSA NetWitness Logs and Packets decoders are responsible for the real-time collection of network data. The decode captures data in real time and can normalize and reconstruct data for full session analysis. In addition, the decoder can collect flow and endpoint data.
PUBLISHER
Cortex
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | December 7, 2020 | |
| Last Release | February 14, 2022 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
