RSA NetWitness Informer
RSA NetWitness Informer sets a new standard for network security analytics. Informer is designed to immediately integrate into your existing security-operations processes and deliver a level of previously unachievable real-time situational awareness.
As part of the RSA NetWitness platform, Informer provides real-time enterprise-wide visualization, alerting, reporting, and trending analysis. Informer does not simply rely on log files, netflow, or other limited data sets to generate alerts: It harnesses the pervasive knowledge of your network obtained by RSA NetWitness.
By having every session, communication, service, application, and user activity recorded, reconstructed, and exposed for analysis, Informer can present your team with virtually unlimited answers. Zero-day malware, botnets, policy-evasion tactics, intentional data exfiltration, anomalous communications, compliance gaps, and other trends occurring on your network can become quickly apparent through Informer’s rules-based approach and dashboard.
Informer offers a fully interactive and intuitive web-based graphical user interface (GUI) for viewing alerts, charting, and tiled views, and for employing hundreds of standard reports and alerts. The GUI also enables users of any skill level to quickly build their own custom alerts, queries, reports, and rules.