Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.

Work roles that include this task

• CS-511 additional Cyber Defense Analyst