1030
May 21, 2020
KSATs
1030 (NIST ID: T0278)
Task
Collect intrusion artifacts (e.g., source code, malware, trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.
Core KSAT for the following Work Roles
Cyber Defense Incident Responder (Core)
Investigates, analyzes, and responds to cyber incidents within the network environment or enclave.
Additional KSAT for the following Work Roles
No Work Roles with Additional KSAT 1030 |