karl_wallin
1 Copper

Netwitness Investigator 9, can't find how to import feeds?

Hi!

Recently downloaded Netwitness Investigator 9 (freeware) and looked at a few "HowTo"s in order to add TI-feeds.
In a picture I saw from Netwitness Investigator 8 there should be a link on the "Welcome"-page to add free feeds, for example "SANS Internet Storm Center" and "SDN websites" as well as subscribing to the service "Netwitness Live" (which I assume costs money).

Please see this pdf and page 19 for what I mean:

https://digital-forensics.sans.org/summit-archives/2010/netwitness-lnl.pdf


In version 9 these options seem to have been removed:


Screen Shot 2016-07-29 at 12.13.23.png

Am I correct to assume that these are now features you need to pay for, i.e. that you need a "Netwitness Live"-account/subscription?

Otherwise I would really appreciate it if someone could tell me how to import free feeds into NetWitness Investigator 9.

I don't seem to have access to put this in "RSA Xchange" where it belongs, why is that?

Best Regards and very grateful for your time and assistance - Karl

0 Kudos