Defensive incident analysis
Use synthetic firewall, IDS and host logs to write an incident timeline and a prioritized mitigation recommendation.
The network defense analyst role gathers evidence from multiple log sources and develops mitigation strategies.
Source posting