1095
May 21, 2020
KSATs
1095 (NIST ID: K0187)
Knowledge
Knowledge of how different file types can be used for anomalous behavior.
Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.
Core KSAT for the following Work Roles
No Work Roles with Core KSAT 1095 |
Additional KSAT for the following Work Roles
Cyber Defense Forensics Analyst (Additional)
Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation.
Forensics Analyst (Additional)
Conducts deep-dive investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents.