5720
May 21, 2020
KSATs
5720 (NIST ID: T0398)
Task
Perform file and registry monitoring on the running system after identifying intrusion via dynamic analysis.
Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.
Core KSAT for the following Work Roles
No Work Roles with Core KSAT 5720 |
Additional KSAT for the following Work Roles
Cyber Defense Forensics Analyst (Additional)
Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation.