Knowledge statement ID: K0909

Knowledge of abnormal physical and physiological behaviors

Work roles with this Knowledge

Insider Threat Analysis
Category: Protection and Defense
NICE Framework ID: PD-WRL-005
Responsible for identifying and assessing the capabilities and activities of cybersecurity insider threats; produces findings to help initialize and support law enforcement and counterintelligence activities and investigations.
Cybercrime Investigation
Category: Investigation
NICE Framework ID: IN-WRL-001
Responsible for investigating cyberspace intrusion incidents and crimes. Applies tactics, techniques, and procedures for a full range of investigative tools and processes and appropriately balances the benefits of prosecution versus intelligence gathering.

Source: Workforce Framework for Cybersecurity (NICE Framework) (NIST SP 800-181 Rev 1) (Version: 1.0.0)