• Collecting and analyzing network traffic
• Monitoring of external data sources to maintain the currency of Computer Network Defense threat conditions,
• Receiving and analyzing network alerts from various sources within the enterprise and determine possible causes of such alerts
• Performing analysis of log files from a variety of sources (e.g., network traffic logs, firewall logs, intrusion detection system logs, DNS logs) to identify possible threats to network security