M01_L01 M01_L01 Course Introduction links ../M01_L01/assets/coursemap.swf courseMenuBtn Course menu Course menu. Select this button to access the course menu. MainMenuButtonClicked moduleMapBtn Lesson Map Lesson Map. Select this button to access the lesson map. CourseMapButtonClicked glossaryBtn Glossary Glossary. Select this button open the glossary. GlossaryButtonClicked resourcesBtn Resources Resources. Select this button open the resources. ResourcesButtonClicked exitBtn Exit Exit. Select this button to exit the course. ExitButtonClicked replayBtn Replay Replay. Select this button to replay the current screen. ReplayButtonClicked pauseBtn Pause Pause. Select this button to pause the course. PauseButtonClicked resumeBtn Resume Resume. Select this button to resume the course. ResumeButtonClicked previousPgBtn Previous Page Previous. Select this button to go to the previous screen. PreviousButtonClicked nextPgBtn Next Page Next. Select this button to go to the next screen. NextButtonClicked disaiar01_01 1 DoD networks face a broad range of security threats that increase in both number and complexity each year. Computer Network Defense, or CND, exists to protect DoD networks, monitor activity on DoD networks, detect and analyze suspicious and anomalous activity on DoD networks, and quickly respond to malicious events to mitigate potential damage. As a CND analyst, your ability to identify and analyze a CND incident and develop an appropriate response is critical to ensuring the security of DoD computing and communication systems and maintaining the integrity of DoD information and information systems. Previous courses in this IDS Analysis series have provided a broad base of knowledge related to Intrusion Detection System, or IDS, and CND analysis. In this course, you will learn specific tactics, techniques, and procedures, or TTPs, that you can use in conducting CND analysis and in developing timely and appropriate responses to CND incidents. Rich Media Text Description. Course: D O D Intrusion Detection System (I D S) Analysis, Part 4: C N D Analysis: Incident Response and Analysis, Lesson 1: Course Introduction. For each screen you will hear a description. The description is cued by an audio tone. Listen to the description, and then select the play audio narration button to continue. Screen 1 of 2. Lesson title: Course Introduction. Topic title: Introduction. Screen title: Course Overview. Image displays of global D O D network with various adversaries attempting to infiltrate various parts of network.Protection is displayed on several component networks. One adversary is shown successfully breaking in to a component network. Infected network is shown being isolated from the other networks as all other adversaries' attempts to connect are deflected away from network assets. Text displays in support of audio. disaiar01_02 2 When you complete this course, you will be able to describe the role of the Computer Network Defense Service Provider, or CNDSP, program within the DoD. You will also be able to describe an incident analysis methodology and apply standard incident analysis procedures to your analysis of a CND incident. There are six lessons in this course, starting with this Course Introduction. Lesson 2, DoD CNDSP Program, provides an overview of the roles and responsibilities associated with CND, discusses the goals of CND, and introduces the primary CND services of the DoD. Lesson 3, Incident Analysis Methodology, begins with a high-level overview of incident analysis, explores the role of the CND analyst in incident analysis, and then introduces a DoD incident analysis methodology. Lesson 4, Incident Analysis, discusses various types of incident analysis that may be conducted. The course content culminates in Lesson 5, Bringing It All Together: Incident Analysis Scenario, which will lead you through an incident response scenario. Finally, the Course Conclusion reviews key points from each lesson and provides an opportunity for you to print a certificate of completion when you have completed the course. Screen 2 of 2. Screen title: Objectives and Lessons. Three learning objectives display in support of audio. Six topics display. The first topic is titled Course Introduction. The second topic is titled D O D C N D S P Program. The third topic is titled Incident Analysis Methodology. The fourth topic is titled Incident Analysis. The fifth topic is titled Bringing it all Together: Incident Analysis Scenario. The sixth and final topic is titled Course Conclusion. Text displays: References to open source or freeware in this training product are for training purposes only, and should not be considered endorsements of these products. Please check with your command, service, or agency for guidance on the use of these products. The acronym C N D S P becomes a rollover that reads Computer Network Defense (C N D) Service Provider.