- NIST SP 800-150 Guide to Cyber Threat Information Sharing
- NIST SP 800-101 Rev. 1 – Guidelines on Mobile Device Forensics
- NIST SP 800-86 – Guide to Integrating Forensic Techniques into Incident Response
- NIST SP 800-83 Rev. 1 – Guide to Malware Incident Prevention and Handling for Desktops and Laptops
- NIST SP 800-61 Rev.2 – Computer Security Incident Handling Guide
Candidates must possess at least 3 years of experience in cyber hunt, advanced malware analysis, or incident response and forensics (or forensic sampling) in order to obtain the expert level credential. The associate level credential will be awarded to those who pass the exam, but do not have the required experience. The credential can be elevated to expert level upon attaining the required experience. Simply email [email protected] to start the experience verification process.
Mapping to the NICE Framework
NICE Work Role Name:
NICE Framework Category
CCE® Concentration Area:
NICE Specialty Area:
Threat Analysis (TWA)
NICE Work Role ID:
OPM Code | DCWF Code:
NICE Work Role Description:
Develops cyber indicators to maintain awareness of the status of the highly dynamic operating environment. Collects, processes, analyzes, and disseminates cyber threat/warning assessments.
Lunarline Training Courses:
Continuing Education: The Lunarline SCS Training Program and other third-party vendors offer activities, products and services across the country that qualify as Professional Development Credits (PDCs) that target the same NICE category, specialty area, work role, and/or authoritative sources as our certifications. We encourage candidates to use a variety of tools and resources that will enhance their understanding of relevant principles and reflect their learning styles and needs.
- Threat/Warning Analyst (AN101-RBT)
- Cybersecurity Hunt (CO280)