Knowledge ID: K0046

Knowledge Description: Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.

Work Roles with this Knowledge:

• Work Role ID: IN-INV-001
  Work Roles: Cyber Crime Investigator
  Work Role Description: Identifies, collects, examines, and preserves evidence using controlled and documented analytical and investigative techniques.
  Category: Investigate
  Specialty Area(s): Cyber Investigation
• Work Role ID: OV-MGT-001
  Work Roles: Information Systems Security Manager
  Work Role Description: Responsible for the cybersecurity of a program, organization, system, or enclave.
  Category: Oversee and Govern
  Specialty Area(s): Cybersecurity Management
• Work Role ID: PR-CDA-001
  Work Roles: Cyber Defense Analyst
  Work Role Description: Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats.
  Category: Protect and Defend
  Specialty Area(s): Cyber Defense Analysis
• Work Role ID: PR-CIR-001
  Work Roles: Cyber Defense Incident Responder
  Work Role Description: Investigates, analyzes, and responds to cyber incidents within the network environment or enclave.
  Category: Protect and Defend
  Specialty Area(s): Incident Response