4232
February 6, 2024
KSATs
4232 (NIST ID: N/A)
Ability
Ability to de-obfuscate (e.g. command line execution, string substitution, clandestine side channel, Base64).
Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.
Core KSAT for the following Work Roles
No Work Roles with Core KSAT 4232 |
Additional KSAT for the following Work Roles
Host Analyst (Additional)
A Host Analyst (HA) will have knowledge of various system configurations encountered. This work role also performs analysis using built-in tools and capabilities. A Host Analyst will have knowledge of system services and the security and configuration of them, as well as knowledge of file systems, permissions, and operation system configurations. The Host Analyst conducts analysis using built-in tools and capabilities.