Conduct analysis of log files, evidence, and other information in order to determine best methods for identifying the perpetrator(s) of a network intrusion.

Work roles that include this task

• CS-212 additional Cyber Defense Forensics Analyst
• EN-211 additional Forensics Analyst