RSA NetWitness Platform Foundations 11.3 Course Overview

To ensure a successful learning experience in the RSA NetWitness Platform Foundations 11.3 course, the following prerequisites are recommended for participants:

• Basic understanding of networking principles, including common networking protocols and services (e.g., TCP/IP, DHCP, DNS).
• Familiarity with system administration concepts for both Windows and Linux operating systems.
• An introductory level of knowledge regarding information security principles and practices.
• Experience with or exposure to security information and event management (SIEM) concepts and tools.
• Ability to navigate and perform basic operations on a computer, including file management and use of a web browser.

These prerequisites are designed to provide a foundation upon which the course will build. They ensure that all participants start with a minimum level of knowledge that is necessary to grasp the more advanced topics covered in the training.

Target Audience for RSA NetWitness Platform Foundations 11.3

The RSA NetWitness Platform Foundations 11.3 course prepares IT professionals for security analytics and incident response roles.

• Information Security Analysts
• Incident Responders
• Network Security Engineers
• Cybersecurity Consultants
• SOC (Security Operations Center) Analysts
• Threat Intelligence Analysts
• Security Architects
• IT Professionals with a focus on security operations
• Security Systems Administrators
• Forensic Analysts
• Cyber Defense Analysts
• Compliance Officers dealing with cybersecurity
• Technical Support Engineers for security platforms
• Security Managers who oversee incident detection and response teams
• IT Auditors who need an understanding of security event investigation

Learning Objectives - What you will Learn in this RSA NetWitness Platform Foundations 11.3?

Introduction to Learning Outcomes:

The RSA NetWitness Platform Foundations 11.3 course equips learners with the skills to effectively utilize the NetWitness Platform for threat detection and cybersecurity analysis.

Learning Objectives and Outcomes:

• Understand the components and architecture of the RSA NetWitness Platform to better grasp its functionality and deployment.
• Gain knowledge of how RSA NetWitness processes and categorizes data, including the differentiation between packets, logs, data, and metadata.
• Learn to navigate and customize the RSA NetWitness Interface for efficient security investigations.
• Acquire the ability to write simple and complex queries, create data visualizations, and use meta groups for enhanced analysis.
• Develop skills for filtering data with rules and understanding taxonomy to refine datasets and improve threat detection.
• Create and deploy content using Application and Correlation rules, as well as RSA Live, to generate actionable metadata.
• Configure the Reporting Engine and RESPOND, and learn to create reports and alerts that help identify future threats.
• Set up and manage Event Stream Analysis (ESA) alerts and understand the best practices for ESA configurations.
• Explore the Incident Management and RESPOND modules, including viewing alerts, managing incidents, and creating incident rules.
• Understand User and Entity Behavior Analytics (UEBA) concepts and apply them to analyze suspicious logon activity and other anomalies.