- Learning Path Libraries: This path is only available in the libraries listed. To access this path, purchase a license for the corresponding library.
- Security
Cyber Defense Incident Responder | Work Role ID: 531 (NIST: PD-WRL-003)
A **cyber defense incident responder** investigates, analyzes, and responds to cyber incidents within the network environment or enclave.
This path will get you started on your journey to becoming a cyber defense incident responder! Begin with the fundamental concepts of network protocols and common network analysis and incident response techniques through hands-on labs, dive into the essential skills necessary to perform the day-to-day functions security event triage and then expand your skill set with, automation, deeper/advanced concepts and additional knowledge from adjacent roles!
This path aligns to the Knowledge, Skills, Abilities and Tasks (KSAs) within the **Workforce Framework for Cybersecurity (CSWF)** and the **DoD Cyber Workforce Framework (DCWF)** for the work role of:
**Cyber Defense Incident Responder** Work Role 531 or PD-WRL-007
Content in this path
Fundamentals
Begin your learning journey with the fundamental concepts of networking and security!
Skill Essentials
Now that you know the fundamentals, dive into the essential skills necessary to perform the day-to-day functions of a cyber defense incident responder including detection, analysis, containment, and eradication!
Expanded Skillset
It's time to expand your skill set with tools, and more advanced concepts! This section gives you a brief introduction into many, additional skills that you will find helpful as a cyber defense incident responder. We have full training paths on all of these skills; see the Supplemental Skill Paths section to learn more.
Adjacent Skill Knowledge
Now that you've mastered all the skills for a cyber defense incident responder, learn about additional cyber roles and their responsibilities.
- None
- cswf
- dcwf
- Incident Response
- nice framework