Task ID: T0258

Task Description: Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.

Work Roles with this Task:

  • Work Role ID: PR-CDA-001
    Work Role Description: Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats.
    Specialty Area(s): Cyber Defense Analysis