Be able to explain the importance of efficiency and process improvement in security operations.

Compare and contrast threat-intelligence and threat-hunting concepts.

Be able to use appropriate tools or techniques to determine malicious activity.

Be capable of analyzing indicators of potentially malicious activity in network, host, and application-related scenarios.

Understand and be able to explain the importance of system and network architecture concepts as they relate to security operations.

Explain and perform post-incident activity phases of the incident management life cycle.

Understand and Perform incident response activities including containment, eradication, and recovery.

Explain concepts related to different attack methodology frameworks.

Interpret Metrics and key performance indicators (KPIs)

Compare and contrast important components of different types of reports and how to identify and effectively communicate with Stakeholders.