Unsolved
This post is more than 5 years old
1 Message
0
935
July 29th, 2016 04:00
Netwitness Investigator 9, can't find how to import feeds?
Hi!
Recently downloaded Netwitness Investigator 9 (freeware) and looked at a few "HowTo"s in order to add TI-feeds.
In a picture I saw from Netwitness Investigator 8 there should be a link on the "Welcome"-page to add free feeds, for example "SANS Internet Storm Center" and "SDN websites" as well as subscribing to the service "Netwitness Live" (which I assume costs money).
Please see this pdf and page 19 for what I mean:
https://digital-forensics.sans.org/summit-archives/2010/netwitness-lnl.pdf
In version 9 these options seem to have been removed:
Am I correct to assume that these are now features you need to pay for, i.e. that you need a "Netwitness Live"-account/subscription?
Otherwise I would really appreciate it if someone could tell me how to import free feeds into NetWitness Investigator 9.
I don't seem to have access to put this in "RSA Xchange" where it belongs, why is that?
Best Regards and very grateful for your time and assistance - Karl