Third-party products and services, including course instructors have helped many candidates to close knowledge and skill gaps. Lunarline does not endorse any particular provider and encourages candidates to use a variety of tools and resources that will enhance their understanding of relevant principles and the exam’s concentration area.
Certification Description
Successful completion of this exam will demonstrate a candidates ability to analyze exploits of different types of vulnerabilities of various services (protocols such as: HTTP, HTTPS, ICP, HTCP, WCCP, SOCKS, PHP, CGI, ODBC, HTML, and XML) and technologies (such as: Web Servers, Database Servers, Windows, Linux, and Embedded Devices).
The candidate shall demonstrate the ability to recognize the toolkits, malicious code, and techniques used for exploitation. The candidate’s understanding of the associated risks, effects, severity, and the prevention, mitigation, and recovery methods for different exploits will also be demonstrated.
Authoritative Sources
- NIST IR 7788 – Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs
- NIST IR 7435 – The Common Vulnerability Scoring System (CVSS) and Its Applicability to Federal Agency Systems
- DoDI O-3600.03 – Technical Assurance Standard (TAS) for Computer Network Attack (CNA) Capabilities **PKI-Enabled
Requirements
Candidates must possess at least 3 years relevant experience in analyzing exploits of various protocols, services, and technologies in order to obtain the expert level credential. The associate level credential will be awarded to those who pass the exam, but do not have the required experience. The credential can be elevated to expert level upon attaining the required experience. Simply email [email protected] to start the experience verification process.
Mapping to the NICE Framework
NICE Work Role Name:
Exploitation Analyst
NICE Specialty Area:
Exploitation Analysis (EXP)
NICE Work Role ID:
AN-EXP-001
OPM Code | DCWF Code:
121
NICE Work Role Description:
Collaborates to identify access and collection gaps that can be satisfied through cyber collection and/or preparation activities. Leverages all authorized resources and analytic techniques to penetrate targeted networks.
Lunarline Training Courses:
Continuing Education: The Lunarline SCS Training Program and other third-party vendors offer activities, products and services across the country that qualify as Professional Development Credits (PDCs) that target the same NICE category, specialty area, work role, and/or authoritative sources as our certifications. We encourage candidates to use a variety of tools and resources that will enhance their understanding of relevant principles and reflect their learning styles and needs.
- Cybersecurity Tools and Analysis (PR210)
- Ethical Hacking and Penetration Testing (PR133)
- Exploitation Analyst (AN102-RBT)
- PhP Hacker (PR150)
NICE Work Role Name:
All Source-Collection Manager
NICE Framework Category
CCE® Concentration Area:
Collect and Operate (CO)
NICE Specialty Area:
Collection Operations (CLO)
NICE Work Role ID:
CO-CLO-001
OPM Code | DCWF Code:
311
NICE Work Role Description:
Identifies collection authorities and environment; incorporates priority information requirements into collection management; develops concepts to meet leadership’s intent. Determines capabilities of available collection assets, identifies new collection capabilities; and constructs and disseminates collection plans. Monitors execution of tasked collection to ensure effective execution of the collection plan.
Lunarline Training Courses:
Continuing Education: The Lunarline SCS Training Program and other third-party vendors offer activities, products and services across the country that qualify as Professional Development Credits (PDCs) that target the same NICE category, specialty area, work role, and/or authoritative sources as our certifications. We encourage candidates to use a variety of tools and resources that will enhance their understanding of relevant principles and reflect their learning styles and needs.
- All Source-Collection Manager (CO202-RBT)
- Cybersecurity Hunt (CO280)
NICE Work Role Name:
All Source-Collection Requirements Manager
NICE Framework Category
CCE® Concentration Area:
Collect and Operate (CO)
NICE Specialty Area:
Collection Operations (CLO)
NICE Work Role ID:
CO-CLO-002
OPM Code | DCWF Code:
312
NICE Work Role Description:
Evaluates collection operations and develops effects-based collection requirements strategies using available sources and methods to improve collection. Develops, processes, validates, and coordinates submission of collection requirements. Evaluates performance of collection assets and collection operations.
Lunarline Training Courses:
Continuing Education: The Lunarline SCS Training Program and other third-party vendors offer activities, products and services across the country that qualify as Professional Development Credits (PDCs) that target the same NICE category, specialty area, work role, and/or authoritative sources as our certifications. We encourage candidates to use a variety of tools and resources that will enhance their understanding of relevant principles and reflect their learning styles and needs.
- All Source-Collection Requirements Manager (CO203-RBT)
- Cybersecurity Hunt (CO280)