RSA Delivers 'Hunter Packs,' Equips RSA NetWitness® Platform for Threat Detection and Response

Accelerate security analysts’ ability to detect and contain known and unknown cyber threats with intelligence from RSA NetWitness Platform Hunter Packs.


  • Hunter Packs provide actionable intelligence to zero-in on known and unknown threats
  • RSA NetWitness Platform users uncover and respond to real threats faster, enabling security teams to be far more efficient and effective

RSA CHARGE – New Orleans, LA, October 26, 2016 – RSA, a Dell Technologies business, unveiled updates and enhancements to the RSA NetWitness Platform that gives analysts the industry's most advanced threat detection and response solution to discover, contain and ultimately eradicate threats.

The "Hunter Packs", delivered out-of-the-box via RSA Live, are designed to help organizations detect both known and unknown threats. RSA Live is a service that is engineered to provide content and Threat Intelligence to RSA NetWitness Platform customers. Intelligence not only from industry research, but also crowd sourced from RSA's customer base and the organization's own proprietary data, is aggregated and operationalized at ingestion, to help detect indicators of compromises – saving valuable time and resources.

Using the RSA NetWitness Platform, organizations can now deploy the same threat detection content that RSA's Incident Response Practice uses every day to smoke out and respond to active threats around the globe.

A new set of "meta keys" facilitates the enablement of new content. An analyst can rapidly find interesting and suspicious events by applying content packs that leverage the new meta keys instead of manually editing or updating indices. Specifically, analysts can find behaviors of compromise, identify unusual protocols and file attributes, and quickly categorize threats to streamline investigation. These capabilities were developed in collaboration with the Dell Cybersecurity Intelligence & Response Team and were leveraged successfully at the Black Hat USA 2016 conference.

RSA NetWitness Platform is engineered to address the increasingly pervasive threats posed by fast-moving attacks that target strategic business assets with precision and escalating impact through a deep understanding of the broadest set of attack vectors. While organizations recognize the impact these advanced threats present to infrastructure, reputation and financial health, research shows they are slow to detect and respond to these threats.

The latest RSA Threat Detection Survey revealed 92 percent of organizations cannot detect threats very quickly and 89 percent cannot investigate fast enough. With the Hunter Packs, RSA NetWitness Platform is designed to offer organizations a unified solution that helps analysts identify and understand compromises so they can detect and respond to threats before they have a negative business impact.

Other features include:

  • Expanded behavior analytics capabilities help enable customers to leverage logs to identify potential command and control activities.
  • Enhanced Cloud visibility for Azure. As more sensitive data, applications and resources are moving to the cloud, RSA NetWitness Platform provides the flexibility organizations need.
  • Out-of-the-box dashboards and reports that enable organizations to show value to management and the Board.


Michael Adler, Vice President, Product, NetWitness Platform, RSA

"As RSA continues to execute on our vision around business-driven security offerings, we are continuously expanding and enhancing our RSA NetWitness Platform to provide unparalleled insight for our customers and help organizations to have the fastest, most comprehensive ability to defeat today's security threats. Leveraging intelligence from our Incident Response team helps our customers hunt more effectively. "


The version of NetWitness will be available later in 2016.


About RSA Charge

RSA Charge is the premier event for RSA customers bringing together security, governance, risk and compliance professionals from across the globe. The annual event highlights the issues, challenges and revolutionary thinking within the dynamic and maturing security and risk management industry, all in one place. RSA Charge fosters and strengthens the RSA customer community by providing a collaborative environment for learning with inspiring keynote speakers, hand-on experiences, networking and the sharing of best practices, case studies, ideas and experiences.


RSA helps more than 30,000 customers around the world take command of their security posture by partnering to build and implement business-driven security strategies. With RSA's award-winning cybersecurity solutions, organizations can effectively detect and respond to advanced attacks; manage user identities and access; and reduce business risk, fraud and cybercrime. For more information, go to

RSA and Netwitness are either registered trademarks or trademarks of EMC Corporation in the United States and/or other countries. Azure is an either registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. All other products and/or services referenced are trademarks of the respective companies.

Concepts presented for consideration. EMC makes no representation and undertakes no obligations with regard to product planning information, anticipated product characteristics, performance specifications, or anticipated release dates (collectively, "Roadmap Information"). Roadmap Information is provided by EMC as an accommodation to the recipient solely for purposes of discussion and without intending to be bound thereby.