Threat Detection and Response

< What it does >

Empowers security teams to rapidly detect today’s targeted attacks

Empowers security teams to rapidly detect today’s targeted attacks

Dell Technologies (RSA) is a Leader in the 2020 Gartner Magic Quadrant for SIEM. RSA NetWitness Platform brings together evolved SIEM and threat defense solutions that deliver unsurpassed visibility, analytics and automated response capabilities. These combined capabilities help security teams work more efficiently and effectively, up-leveling their threat hunting skills and enabling them to investigate and respond to threats faster, across their organization’s entire infrastructure—whether in the cloud, on premises or virtual.

Get the details: Read the solution brief

Unparalleled visibility

Unparalleled visibility

Gives security teams the visibility they need to detect sophisticated threats hiding in today’s complex, hybrid IT infrastructures.

Improved analyst productivity

Improved analyst productivity

Analytics, machine learning, and orchestration and automation capabilities make it easier for analysts to prioritize and investigate threats faster.

Faster, more advanced threat detection

Faster, more advanced threat detection

Detects attacks in a fraction of the time of other platforms and connects incidents to expose the full attack scope.

< How it works >

Combines visibility, analytics and automation in a single solution

RSA NetWitness Platform accelerates threat detection and response by collecting and analyzing data across more capture points (logs, packets, netflow and endpoint) and computing platforms (physical, virtual and cloud) and enriching this data with threat intelligence and business context.

A Leader in the 2020 Gartner Magic Quadrant for SIEM

How RSA NetWitness Platform helps you manage digital risk

Digital transformation is making security more challenging than ever: More technology gives attackers more vulnerabilities to exploit and more ways to evade detection. But by providing pervasive visibility across modern IT infrastructures and by enabling faster threat detection and response, RSA NetWitness Platform arms security teams to stay ahead of these threats and minimize their impact on the business.

< Offerings >


Industry-leading capabilities for threat detection and response

Evolved SIEM

RSA NetWitness Platform Evolved SIEM functions as a single, unified platform for all your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end.

Improve visibility

Threat defense

RSA NetWitness Platform for Threat Defense provides security analysts with advanced capabilities for rapidly detecting and resolving known, unknown and targeted attacks. It uses machine learning to automate and orchestrate the entire incident response lifecycle.

Detect threats

Log management

RSA NetWitness Logs gives you instant visibility into log data spread across your entire IT environment—simplifying threat detection and investigation, reducing attacker dwell time and supporting compliance.

Manage logs

Network detection and response

RSA NetWitness Network provides real-time visibility into all your network traffic with full packet capture—enabling you to detect threats as they traverse your network and reconstruct entire network sessions.

Monitor your network

Endpoint detection and response

RSA NetWitness Endpoint offers deep visibility into activity across all of your endpoints, on and off your network, so you can cut the cost, time and scope of incident response.

Monitor endpoints

User and entity behavior analytics (UEBA)

RSA NetWitness UEBA leverages user, network and endpoint behavior profiling to identify abnormal behaviors that may signal an insider threat or an external attacker leveraging compromised credentials.

Identify unusual behavior

Security orchestration and automation


Modernize your SOC

It used to take me one and a half to two hours each morning to run through security alerts from different systems, but now, because of the integration with RSA NetWitness Platform, it only takes me 15 to 20 minutes.

Rich Sheridan
IT Manager

RC Willey Home Furnishings

Discover more from RSA

Mitigate cyber attack risk

Mitigate cyber attack risk


Coordinate response

Secure your cloud transformation

Secure your cloud transformation


Secure your clouds

Protect from insider threats

Protect from insider threats

Gain the visibility and advanced behavior analytics that are essential to detect potential insider threats and assess the risk they pose.

Manage insider access

Orchestrate rapid incident response

Orchestrate rapid incident response

Combine full visibility with business context and threat intelligence to automate and orchestrate detection and response to the threats that matter most.

Respond faster

Threat Detection and Response

RSA NetWitness Platform

Recommended for you