NETWITNESS

Official Coordinates

RSA NetWitness

10700 Parkridge Blvd., 6th Floor

Reston, VA 20191

Tel: +1-703-889-8950

Fax: +1-703-651-3126

Persons involved

• Amit Yoran

Senior Vice President RSA, The Security Division of EMC; Chief Executive Officer and Founder NetWitness Corporation

Amit Yoran has been serving as CEO of NetWitness since November of 2006. Prior to NetWitness, he was appointed as Director of the US-CERT and National Cyber Security Division of the Department of Homeland Security, and as CEO and advisor to In-Q-Tel, the venture capital arm of the CIA. Formerly Mr. Yoran served as the Vice President of Worldwide Managed Security Services at the Symantec Corporation. Mr. Yoran was the co-founder of Riptech, a market leading IT security company, and served as its CEO until the company was acquired by Symantec in 2002. He served as an officer in the United States Air Force in the Department of Defense's Computer Emergency Response Team. Mr. Yoran serves as a commissioner on the CSIS Commission on Cyber Security for the 44th Presidency and numerous other industry advisory bodies.

• Tim Belcher

Chief Technology Officer

As Chief Technology Officer for NetWitness, Tim Belcher is responsible for the company's overall product vision, development and technology roadmap. Previously, Mr. Belcher co-founded Riptech where he served as CTO. At Riptech, Mr. Belcher was the visionary behind Caltarian, the award-winning and breakthrough security event correlation technology that was the foundation for Riptech's security monitoring services. Ernst & Young recognized Mr. Belcher for his success with the "Entrepreneur of the Year" award in 2001.

• Edward Schwartz

Chief Security Officer

As Chief Security Officer for NetWitness, Eddie Schwartz is responsible for the alignment of the NetWitness product strategy with the evolving operational threat management needs of government and commercial organizations. Prior to joining NetWitness, Mr. Schwartz served as CTO of ManTech Security Technologies Corp, Senior Vice President of Operations of Guardent Inc, (acquired by Verisign), and EVP of Operations for Predictive Systems (acquired by INS). Mr. Schwartz also worked as Chief Information Security Officer at Nationwide Insurance, as a Senior Computer Scientist for CSC, and a Foreign Service Officer with the U.S. Department of State.

• Dana Duffy

Chief Financial Officer

As Chief Financial Officer, Dana Duffy is responsible for the Finance, Accounting and Administrative operations of the Company. Prior to NetWitness, Ms. Duffy served as Treasurer, Controller and Corporate Counsel to Care Fusion Incorporated and assisted with the successful exit and merger with Cardinal Health. She has over ten years experience in assisting early stage companies with their growth acting as the senior Finance and Accounting professional and is a registered attorney in the District of Columbia.

Products / Services

• Spectrum

An expert, automated malware analysis engine that provides prioritization and workflow for zero-day and emerging threats within your enterprise.

• Visualize

A revolutionary, multi-touch, graphical rendering of network intercepted data that accelerates the incident management and investigatory processes, enabling faster and easier analysis of what occurred over time.

• Live

NetWitness Live aggregates the best advanced threat intelligence and multi-source content of the global security community, and fuses it in real-time with your NetWitness network monitoring platform.

• Informer

Provides rules-based, automated reporting, alerting and enterprise security integration for the enterprise.

• Investigator

The award-winning, industry standard in deep, freeform analytics for network investigations, and real-time, actionable intelligence.

• SIEMLink

Enables instant integration of the NetWitness enterprise network monitoring platform with existing security tools and infrastructures.

• API/SDK

A full-featured application programming interface that enables the ultimate in flexibility for NetWitness customers that demand it.

• Decoder

A real-time, distributed, highly configurable network recording appliance that enables users to collect, filter, and analyze full network traffic.

• Concentrator

Designed to aggregate data from Decoders hierarchically for ultimate scalability and deployment flexibility across various organization-specific network topologies and infrastructures.

• Broker

For environments with multiple Concentrators, Broker provides a single enterprise view.