Deploys as a single appliance or dozens, partially or fully virtualized, on premises or in the cloud.

RSA NetWitness Orchestrator delivers complete incident management, innovative interactive investigations, a machine learning-powered Chatbot, and full playbook automation.

Capable of replaying entire suspect sessions (Web, FTP, email, etc.) as well as providing a view of exactly what data was exfiltrated in an attack.

Identifies threats from various analytics vectors including rules, threat intelligence, malware analysis, and user and entity behavior analytics (UEBA) to provide sophisticated threat detection.

Uses specialized algorithms to automatically extract threat-relevant metadata from disparate sources into more than 200 metadata fields.

Enriches data in real time, at capture time, with threat intelligence and business context, making security data much more useful for analysts during investigations.