Visualize
Visualize presents application and user content in a revolutionary way. Visualize is an extremely powerful analytical capability that enables the security professional to zoom in and out of collected traffic using their mouse or fingers, if equipped with a multi-touch monitor, and to drill down and see exactly what transpired over the course of time.
Users can quickly and efficiently scan through large volumes of objects such as audio, documents, images and video captured by NetWitness, render a visual timeline of an event, deeply interrogate all the activity (e.g. communications, data sent and received, audio transmissions, etc.), and understand all the rich context associated with each object. Visualize enables users to leverage all the rules, keyword searches, and other filters created in Informer to further refine and process the presented information. This capability drives efficiency and accuracy into many security use cases such as:
•Exfiltration of Proprietary Information - The ability to monitor and examine all images such as diagrams, schematics, whiteboard drawings, and other images captured by a mobile phone and sent outside the corporate network.
•Employee Investigation - What documents has an employee downloaded, sent or received during the last 6 months? Was there corporate confidential information in any of the documents, such financial information, released before a quarterly announcement? Has an employee’s productivity improved after being placed on performance review probation?
•Data Leakage Monitoring - The ability to create a daily report to inspect every document sent and received over the network during the past 24 hours regardless of port or protocol. Analysts can interrogate for corporate policy violations, Internet usage monitoring or offensive activities.
