RSAENVISION - "Tips and Tricks" ... and Ten to Watch

"Tips and Tricks" ... and Ten to Watch

Last month, I conducted a survey of Intelligence Community users, asking what they liked about the community and what they wanted more of.  "Tips and Tricks" was a common theme:

• "Tips & tricks, best practices on all areas..."
• "Demostrations, best practice for envision user,etc..."
• "...enVision best practices..."
• "Rules, Tips and Tricks, and 'Thinking outside the box' with uses of enVision"

We get it.  You want to hear from the experts, and you want to learn more about how to use the product better.  The "Tips and Tricks" blog is one way for us to allow the experts to share their tips with you.

You can expect new articles to be added at least once a month, sometimes in connection with a short training video or webinar.  Topics will vary and could include advanced correlation rules, troubleshooting tips, "how-tos" on new features, and anything else you might find valuable.  If you have suggestions for specific topics, please add them in the comments.

One disclaimer: the tips shared in this blog have not been tested by QE and may not work in all situations and all environments.  Before you implement any suggestion, evaluate it in the context of your enVision installation.

To kick things off, I'd like to share something I saw recently: a list of ten training videos on the Intelligence Community.  These "Ten to Watch" address key functionality across the enVision product, including reporting, alerting and operations.  You may have watched a few of these before.  Maybe you've seen them all.  But we thought a consolidated list might be helpful.

Ten to Watch

Reporting
1.Cool things with Reporting
Correlation & Alerting
2.From Collection to Notification,  A Guide to Alerting 
3.Correlation Expertise
4.Combating Zero Day Attacks
Security Operations
5.An Introduction to RSA enVision 4.0
6.How to use Event Explorer 4.0
7.Live Demonstration of new Event Explorer 4.0.1
Virtualization
8.Use enVision to monitor your virtualized environment
Integrating Custom Devices & Applications
9.Live demonstration of EventSource Integrator 1.1
Utilities
10.Command Line Utilities: When, Why and How...

-Regards,

Blackhattrick blog

(Googlethewebsite.blogspot.com/blackhattrick.blogspot.com)