Attachment_4__CWO_STS.doc

This Block Is For Identification Purposes Only

Name Of Trainee

Printed Name (Last, First, Middle Initial)

Initials (Written)

SSAN

Printed Name Of Certifying Official And Written Initials

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

QUALITATIVE REQUIREMENTS

Proficiency Code Key

Scale

Value Definition: The individual

(Operating Principles)

Explanations

* A task knowledge scale value may be used alone or with a task performance scale value to define a level of knowledge for a specific task. (Example: b and 1b)

** A subject knowledge scale value is used alone to define a level of knowledge for a subject not directly related to any specific task, or for a subject common to several tasks.

- This mark is used alone instead of a scale value to show that no proficiency training is provided in the course or CDC.

X This mark is used alone in the course columns to show that training is required but not given due to limitations in resources.

NOTE: All tasks and knowledge items shown with a proficiency code are trained during war time.

This Block Is For Identification Purposes Only

Name Of Trainee

Printed Name (Last, First, Middle Initial)

Initials (Written)

SSAN

Printed Name Of Certifying Official And Written Initials

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

N/I

QUALITATIVE REQUIREMENTS

Behavioral Statement STS Coding System

Each STS element is written as a behavioral statement. The detail of the statement and verb selection reflects the level of training provided by resident training and career development courses.

1 CYBER WARFARE OPERATIONS CAREER FIELD

1.1 Structure

1.2 Progression

1.3 Read CFETP 1B4X1 Part 1

1.4 AFSC 1B4X1

1.4.1 Explain duties of AFSC

1.4.2 Explain Responsibilities of AFSC 1B4X1

1.4.3 AFSC Core Competencies

1.5 Related Cyber Career Fields

1.5.1 Enlisted

1.5.2 Officer

1.5.3 Civilian and Contractor

1.6 Supervisory Duties

1.6.1 Personnel Assignment Tools

1.6.1.1 UMD

1.6.1.2 UPMR

1.6.1.3 ACR

1.6.2 Orient Newly Assigned Personnel to Org, Mission, Training & Cert Requirements

1.6.3 Establish Duty Schedules

1.6.4 Mobility/Contingency Ops/Readiness

1.6.4.1 Manpower Force (MANFOR)

1.6.4.2 Logistics Details (LOGDET)

1.6.4.3 Mission Capibilities (MISCAP)

1.6.4.4 Deployment Readiness Manning Document (DRMD)

1.6.4.5 Operational Plans (OPLAN)/Time Phased Force Deployment Document (TPFDD)

1.6.4.6 AEF Reporting Tool (ART)

1.6.4.7 Status of resources and Training System (SORTS)

1.6.4.8 Defense Readiness Reporting System (DRRS)

1.6.5 Training

1.6.5.1 Air Force Training Program

1.6.5.2 Plan and Schedule OJT

1.6.5.3 Coordinate with Unit Training Manager

1.6.5.4 Conduct Initial Evaluation

1.6.5.5 Evaluate Adequacy of Training

1.6.5.6 Administer the CDC Program

1.6.5.7 Use Current CFETP

1.6.5.8 Conduct OJT

1.6.5.9 Evaluate OJT

1.6.5.10 Manage OJT Documentation

1.6.5.11 Identify Additional Formal Training Requirements

2 NETWORKING CONCEPTS

2.1 Digital Numbering Systems (Internal Data Representation)

2.1.1 Formats

2.1.1.1 Binary

2.1.1.2 Hex

2.1.2 Physical representation

2.1.3 Convert digital numbers across formats

2.1.4 Boolean logic arguements

2.2 Standards and Frameworks

2.2.1 OSI Model

2.2.2 Protocol Data Units

2.2.3 IEEE

2.2.3.1 IEEE 802

2.2.3.2 IEEE 802.1x

2.2.3.3 IEEE 802.3

2.2.3.4 IEEE 802.11

2.3 TCP/IP Suite

2.3.1 Encapsulation/Deencapsulation

2.3.2 Structure

2.4 Network Addressing

2.4.1 Data-Link layer

2.4.1.1 MAC structure

2.4.1.1.1 Address Structure

2.4.1.1.2 Ethernet Frame Structure

2.4.2 Network Layer

2.4.2.1 Internet Protocol (v4 and v6)

2.4.2.1.1 Address Structure

2.4.2.1.2 Packet Structure

2.4.2.1.3 Classful

2.4.2.1.4 Classless

2.4.2.1.5 Public/Private

2.4.2.1.6 Perform IPv4 subnetting

2.4.2.1.7 IPv6 subnetting

2.4.2.1.8 Supernetting

2.5 Routing Protocols

2.5.1 Interior

2.5.2 Exterior

2.5.3 Link-state

2.6 Networks

2.6.1 Physical and Logical Topology

2.6.1.1 Bus

2.6.1.2 Star

2.6.1.3 Mesh

2.6.1.4 Hybrid

2.6.2 Media Access Control Protocols

2.6.3 Packet Switched Networks

2.6.4 Circuit Switched Networks

2.6.5 Transmission methods and medium

2.6.6 Inter-networking

2.6.7 Intra-networking

2.7 Local Area Networking

2.7.1 Cisco Router and Switch

2.7.1.1 Navigate Cisco IOS command line

2.7.1.2 Configure IAW STIG

2.7.1.3 Manipulate Networking Devices

2.7.1.3.1 Interface addresses

2.7.1.3.2 VLANs

2.7.1.3.3 Routing Protocols

2.7.1.4 Enumerate configuration & connected devices

2.7.1.5 Use MAC table

2.7.1.6 Copy device configuration

2.7.1.7 Erase device configuration

2.7.1.8 Implement Access Control List

2.7.1.9 Implement port security

2.7.1.10 Configure port mirroring

2.7.1.11 Copy system image

2.7.1.12 Enable secure remote configuration access

2.8 Virtual Private Network

2.8.1 Protocols

2.8.2 Components

2.9 802.11 Wireless Networking

2.9.1 Fundamentals

2.9.1.1 Topology

2.9.1.2 Components

2.9.1.3 Security

2.9.2 Manipulate wireless access point

2.9.2.1 Connectivity

2.9.2.2 Security

2.10 Network Traffic Analysis

2.10.1 Fundamentals

2.10.2 Network Traffic Analysis Process

2.10.2.1 Capture traffic

2.10.2.2 Analyze traffic

2.10.2.3 Recover a session from raw traffic

2.10.2.4 Identify encoded traffic

2.10.2.5 Identify malicious traffic

2.10.2.6 Identify traffic based on hardware manufacturer

2.10.2.7 Identify traffic based on OS version

2.10.2.8 Identify traffic based on patch release of OS

2.10.2.9 Identify services and applications on a network

3 OPERATING SYSTEM CONCEPTS

3.1 Operating System Types

3.1.1 Windows (Desktop/Server)

3.1.1.1 Components

3.1.1.1.1 Kernel

3.1.1.1.2 Registry

3.1.1.1.3 Drivers

3.1.1.1.4 Boot Process

3.1.1.2 File Structure

3.1.1.2.1 FAT

3.1.1.2.2 NTFS

3.1.1.3 Use the command line

3.1.1.4 Use the graphical user interface

3.1.1.5 Manipulate System

3.1.1.5.1 User accounts

3.1.1.5.2 File systems

3.1.1.5.3 Network shares

3.1.1.5.4 Network settings

3.1.1.5.5 Services

3.1.1.5.6 Firewall

3.1.1.5.7 Logs

3.1.1.5.8 Registry

3.1.2 NIX (Kali)

3.1.2.1 Components

3.1.2.1.1 Kernel

3.1.2.1.2 Drivers

3.1.2.1.3 Boot process

3.1.2.1.4 /proc

3.1.2.2 File structure

3.1.2.3 Use the command line

3.1.2.4 Use the graphical user interface

3.1.2.5 Manipulate System

3.1.2.5.1 User accounts

3.1.2.5.2 File systems

3.1.2.5.3 Network shares

3.1.2.5.4 Network settings

3.1.2.5.5 Services

3.1.2.5.6 Iptables

3.1.2.5.7 Packages

3.1.2.5.8 Logs

3.1.2.5.9 /proc

3.1.3 MOBILE OPERATING SYSTEMS

3.1.3.1 Overview

3.1.3.2 Components

3.1.3.3 File Structure

3.2 VIRTUALIZATION

3.3 SCRIPTING

3.3.1 Batch

3.3.2 Create Powershell Script

3.3.3 Create Bash Script

3.3.4 Create Python Script

4 CYBER WARFARE CONCEPTS AND FUNDAMENTALS

4.1 Fundamentals

4.1.1 Doctrine and policy TTPs and guidance

4.1.2 National Strategy

4.1.3 Command and control

4.1.4 Department of Defense Information Network (DODIN)

4.1.5 Cyber organizations and missions

4.1.6 Cyber Mission Force

4.1.6.1 Definitions and Roles/Responsibilities

4.1.6.2 Command and Control

4.1.6.3 Mission Areas

4.1.6.3.1 Defend the nation

4.1.6.3.2 Operate and defend the DODIN

4.1.6.3.3 Combatant commander support

4.1.6.4 Mission Forces

4.1.6.4.1 National mission force

4.1.6.4.2 Protection force

4.1.6.4.3 Combat mission force

4.1.7 Cyber Warfare Operations

4.1.8 Information Operations

4.2 Threat Types

4.2.1 Internal

4.2.2 External

4.2.3 State sponsored

4.2.4 Non-state sponsored

4.2.5 Intelligence sources

4.2.6 Intelligence reports

4.2.7 Tactics from intelligence sources

4.3 OCO/DCO Theory and Methodology

4.3.1 Offensive Theory

4.3.2 Defensive Theory

4.3.3 Offensive Methodology

4.3.4 Defensive Methodology

4.3.5 Identify offensive methods

4.3.5.1 Buffer overflow tactics

4.3.5.2 Privledge escalation

4.3.5.3 Rootkits

4.3.5.4 Redirects, triggers and exfiltration

4.3.5.5 Social engineering

4.3.5.6 Persistent access

4.3.5.7 Man-in-the-middle

4.3.5.8 Distributed Denial of Service

4.3.5.9 Obfuscation

4.3.6 Identify defensive methods

4.3.6.1 Encryption

4.3.6.2 Secure configurations

4.3.6.3 Secure enclaves

4.3.6.4 Vulnerability scanning

4.3.6.5 Boundary Protection

4.3.6.6 Intrusion detection/prevention (host/network)

4.4 Utilize Tools

4.4.1 Reconnaissance

4.4.2 Vulnerability assessment

4.4.3 Password cracking

4.4.4 Exploitation

4.4.5 Wireless

4.4.6 Persistent access

4.4.7 Reverse engineering

4.4.8 Forensics

4.4.9 Honeypots

4.4.10 Intrusion detection

4.5 Information Assurance

4.5.1 Roles and responsibilities

4.5.2 Emissions Security

4.5.3 Communication Security

4.5.4 Computer Security

4.5.5 Operations security

4.5.6 Physical Security

4.5.7 Information Security

4.6 Crew Operations

4.6.1 Operations training

4.6.2 Standardization and evaluation

4.6.3 Operational procedures

4.6.4 Crew resource management

5 LAWS AND ETHICS

5.1 US Codes (Titles 10,15, 17, 18, 32, 50)

5.2 Rules of Engagement (ROE)

5.2.1 Policy

5.2.2 Security Tools

5.2.3 Cyber Management Ethics

5.2.4 System Monitoring

5.3 Special Data Protection - sensitive personnel information

5.4 Policy and Law

5.4.1 Executive orders

5.4.2 International laws affecting electronic communications

5.4.3 US Law

5.4.3.1 Military Law

5.4.3.2 Intellectual Property Laws

5.4.3.3 US Law Specific to Electronic Crimes

6 CYBER SYSTEMS

6.1 Capabilities

6.1.1 Workstations/Servers

6.1.2 Data networks

6.1.3 Voice networks

6.1.4 Space Networks

6.1.5 Battlefield Networks

6.1.6 Industrial systems

6.1.7 AFNET

6.1.8 Websites and databases

6.2 Vulnerabilities

6.2.1 Workstations/Servers

6.2.2 Data networks

6.2.3 Voice networks

6.2.4 Space Networks

6.2.5 Battlefield Networks

6.2.6 Industrial systems

6.2.7 AFNET

6.2.8 Websites and databases

6.3 Components

6.3.1 Workstations/Servers

6.3.2 Data networks

6.3.3 Voice networks

6.3.4 Space Networks

6.3.5 Battlefield Networks

6.3.6 Industrial systems

6.3.7 AFNET

6.3.8 Websites and databases

6.4 Design

6.4.1 Workstations/Servers

6.4.2 Data networks

6.4.3 Voice networks

6.4.4 Space Networks

6.4.5 Battlefield Networks

6.4.6 Industrial systems

6.4.7 AFNET

6.4.8 Websites and databases

6.5 Security

6.5.1 Workstations/Servers

6.5.2 Data networks

6.5.3 Voice networks

6.5.4 Space and Satellite Networks

6.5.5 Battlefield Networks

6.5.6 Industrial systems

6.5.7 AFNET

6.5.8 Websites and databases

7 JOINT PLANNING

7.1 Lines of Operations

7.1.1 Department of Defense Information Network

7.1.2 Defensive Cyberspace Operations

7.1.3 Offensive Cyberspace Operations

7.2 Joint command and planning process

7.2.1 Structure and organization

7.2.2 Levels of war

7.2.3 Roles and responsibilities

7.3 Command and Control (C2)

7.4 Authorities

7.5 Orders

7.6 Joint Operations Planning Process

7.6.1 Deliberate planning

7.6.2 Crisis action planning

7.7 Integrated Joint Special Technical Operations

7.7.1 Process

7.7.2 Roles and responsibilites

7.8 Cyberspace Operational Planning

7.8.1 Cyberspace command and control

7.8.2 Synchronization

7.8.3 Weaponeering

7.8.4 Asset/Target Analysis

7.8.5 Intelligence gain/loss

7.8.6 Technical gain/loss

7.8.7 Deconfliction

7.8.8 Conduct OCO and DCO mission planning

7.9 Cyberspace Operations Assessments

7.9.1 MOP/MOE

7.9.2 Conducting operations assessments

7.9.3 Conducting battle damage assessments

8 Conduct OCO/DCO

8.1 Generate deny, disrupt, degrade, deceive, destroy effect

8.1.1 Workstations and servers

8.1.2 Data networks

8.1.3 Voice Networks

8.1.4 Wireless networks

8.1.5 Websites and databases

8.1.6 Space Networks

8.1.7 Battlefield Networks

8.1.8 Industrial systems

8.2 Actively Defend

8.2.1 Workstations and servers

8.2.2 IP networks

8.2.3 Voice Networks

8.2.4 Wireless networks

8.2.5 Websites and databases

8.2.6 Space Networks

8.2.7 Battlefield Networks

8.2.8 Industrial systems

8.2.9 AFNET

9 INCIDENT RESPONSE

9.1 Methodology

9.2 Incident Categories

9.3 Remote Evidence Collection

9.4 Reporting

9.5 Forensics

9.6 Conduct Investigation

9.7 Incident Recovery

10 CAPABILITY DEVELOPMENT

10.1 Fundamentals

10.2 Secure Programming

10.3 Agile Development Process

10.4 Reverse Engineering

10.5 Weaponization

10.6 Provisioning

10.7 Operational Frameworks

10.8 Functional Evaluation Fundamentals

10.9 Fuzzing Fundamentals

10.10 Real-Time Operations and Innovation

Note: BLK #4: Columns (1) & (2) can be relabeled to meet CF Requirements; i.e., 2 phase 3 skill level course, 5 lvl QTPs.