NCAE Mapping HubAuthoritative cross-reference for DCWF, NCAE Knowledge Units, O*NET, and the EWU Cyber Operations program
T649
Identify, collect, and seize documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents, investigations, and operations.