Disambiguation evidence for RSA NetWitness via surface form

"security incident response labs"

Triples (1)

Triples where some other subject referred to this entity as "security incident response labs".

The Coroner’s Toolkit (TCT) typicalEnvironment
"security incident response labs"
↳ resolves to RSA NetWitness
surface form: The Coroner’s Toolkit