RSA NetWitness Security Analytics

RSA Security Analytics, compatible with prior to v11. A distributed and modular system that enables highly flexible deployment architectures that scale with the needs of the organization. Security Analytics allows administrators to collect two types of data from the network infrastructure, packet data and log data.

PUBLISHER

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex XSOAR
Created	June 30, 2020
Last Release	April 28, 2022

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Automations

Name	Description
NetwitnessSACreateIncident	Create an incident inside NetWitness SA from a set of NetWitness events.
NetwitnessSAGetComponents	Get a list of components in the NetWitness architecture
NetwitnessSAGetAvailableAssignees	Returns the available NetWitness SA users to be assigned to incidents
NetwitnessSAListIncidents	List NetWitness SA incidents. Filtering and sorting the list is also supported (see optional arguments).
NetwitnessSAGetEvents	Returns all the RSA NetWitness SA events in the defined time range
NetwitnessSAAddEventsToIncident	This command will add new events to an existing NetWitness SA incident

Integrations

Name	Description
RSA NetWitness Security Analytics	RSA Security Analytics, compatible with prior to v11. A distributed and modular system that enables highly flexible deployment architectures that scale with the needs of the organization. Security Analytics allows administrators to collect two types of data from the network infrastructure, packet data and log data.

Pack Name	Pack By
Base	By: Cortex XSOAR

1.0.5 - 2836953 (April 28, 2022)

Integrations

RSA NetWitness Security Analytics

Updated formatting of integration parameters.

Download

1.0.4 - R2411339 (February 14, 2022)

Scripts

NetwitnessSAAddEventsToIncident

Updated the Docker image to: demisto/python:2.7.18.24398.

NetwitnessSACreateIncident

Updated the Docker image to: demisto/python:2.7.18.24398.

NetwitnessSAGetAvailableAssignees

Updated the Docker image to: demisto/python:2.7.18.24398.

NetwitnessSAGetComponents

Updated the Docker image to: demisto/python:2.7.18.24398.

NetwitnessSAGetEvents

Updated the Docker image to: demisto/python:2.7.18.24398.

NetwitnessSAListIncidents

Updated the Docker image to: demisto/python:2.7.18.24398.

Download

1.0.3 - 7567740 (September 12, 2021)

Scripts

NetwitnessSAAddEventsToIncident

Updated the Docker image to: demisto/python:2.7.18.24066.

NetwitnessSACreateIncident

Updated the Docker image to: demisto/python:2.7.18.24066.

NetwitnessSAGetAvailableAssignees

Updated the Docker image to: demisto/python:2.7.18.24066.

NetwitnessSAGetComponents

Updated the Docker image to: demisto/python:2.7.18.24066.

NetwitnessSAGetEvents

Updated the Docker image to: demisto/python:2.7.18.24066.

NetwitnessSAListIncidents

Updated the Docker image to: demisto/python:2.7.18.24066.

Download

1.0.2 - 394234 (July 7, 2021)

Scripts

NetwitnessSACreateIncident

Updated the Docker image to: demisto/python:2.7.18.20958.

NetwitnessSAGetAvailableAssignees

Updated the Docker image to: demisto/python:2.7.18.20958.

NetwitnessSAListIncidents

Updated the Docker image to: demisto/python:2.7.18.20958.

NetwitnessSAGetEvents

Updated the Docker image to: demisto/python:2.7.18.20958.

NetwitnessSAGetComponents

Updated the Docker image to: demisto/python:2.7.18.20958.

NetwitnessSAAddEventsToIncident

Updated the Docker image to: demisto/python:2.7.18.20958.

Download

1.0.1 - R264879 (November 9, 2020)

Integrations

RSA NetWitness Security Analytics
Fixed integration description.

Download

1.0.0 - 60526 (June 30, 2020)

RSA Security Analytics is a distributed and modular system that enables highly flexible deployment architectures that scale with the needs of the organization. Security Analytics allows administrators to collect two types of data from the network infrastructure, packet data and log data.

Download