Automate Threat Detection and Incident Response: SANS Review of RSA NetWitness

In this webcast, SANS analysts Ahmed Tantawy and Dave Shackleford will discuss findings from Ahmed's review of RSA NetWitness, including:

  • Why an evolved SIEM approach is a superior way to handle today's sophisticated threats
  • How machine learning can automate detection and prevention
  • How RSA NetWitness performed in an entire attack lifecycle