Skip to content

Cyber Effects · Work role code 132

Target Digital Network Analyst

The TDNA conducts advanced analysis of collection and open-source data to ensure target continuity, profile targets and their activities, and develop techniques to gain more target cyberspace operations related information. They possess knowledge of target cyberspace technologies and apply skills and knowledge of cyberspace networks and the applications on them to determine how targets communicate, move, operate, and live within the cyberspace domain. TDNAs apply analytical techniques to review relevant content carried in target cyberspace communications. The TDNA uses data from networks of all forms for target development. TDNAs are technology savvy and can be flexible enough to rapidly shift from one target to another.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 2001Accurately characterize targets.Unassigned
  • 2059Provide expertise to course of action development.Unassigned
  • 2066Provide expertise to the development of measures of effectiveness and measures of performance.Unassigned
  • 2081Classify documents in accordance with classification guidelines.Unassigned
  • 2087Collaborate with intelligence analysts/targeting organizations involved in related areas.Unassigned
  • 2089Collaborate with other customer, Intelligence and targeting organizations involved in related cyber areas.Unassigned
  • 2099Compile, integrate, and/or interpret all-source data for intelligence or vulnerability value with respect to specific targets.Unassigned
  • 2101Identify and conduct analysis of target communications to identify information essential to support operations.Unassigned
  • 2134Conduct target research and analysis.Unassigned
  • 2195Maintain awareness of internal and external cyber organization structures, strengths, and employment of staffing and technology.Unassigned
  • 2236Determine if information meets reporting requirements.Unassigned
  • 2243Determine what technologies are used by a given target.Unassigned
  • 2249Develop all-source intelligence targeting materials.Unassigned
  • 2251Apply analytic techniques to gain more target information.Unassigned
  • 2289Develop measures of effectiveness and measures of performance.Unassigned
  • 2356Engage customers to understand customers’ intelligence needs and wants.Unassigned
  • 2393Generate and evaluate the effectiveness of network analysis strategies.Unassigned
  • 2400Examine intercept-related metadata and content with an understanding of targeting significance.Unassigned
  • 2427Gather information about networks through traditional and alternative techniques, (e.g., social network analysis, call-chaining, traffic analysis.)Unassigned
  • 2429Generate requests for information.Unassigned
  • 2434Identify threat tactics, and methodologies.Unassigned
  • 2441Identify and evaluate threat critical capabilities, requirements, and vulnerabilities.Unassigned
  • 2453Identify collection gaps and potential collection strategies against targets.Unassigned
  • 2458Identify critical target elements.Unassigned
  • 2459Identify intelligence gaps and shortfalls.Unassigned
  • 2469Identify network components and their functionality to enable analysis and target development.Unassigned
  • 2515Initiate requests to guide tasking and assist with collection management.Unassigned
  • 2542Maintain awareness of advancements in hardware and software technologies (e.g., attend training or conferences, reading) and their potential implications.Unassigned
  • 2568Make recommendations to guide collection in support of customer requirements.Unassigned
  • 2608Monitor target networks to provide indications and warning of target communications changes or processing failures.Unassigned
  • 2621Provide SME and support to planning/developmental forums and working groups as appropriate.Unassigned
  • 2628Participate in exercises.Unassigned
  • 2628AProvide subject matter expertise to development of exercises.Unassigned
  • 2639Perform content and/or metadata analysis to meet organization objectives.Unassigned
  • 2719Profile targets and their activities.Unassigned
  • 2749Provide input for targeting effectiveness assessments for leadership acceptance.Unassigned
  • 2770Provide time sensitive targeting support.Unassigned
  • 2779Review appropriate information sources to determine validity and relevance of information gathered.Unassigned
  • 2798Research communications trends in emerging technologies (in computer and telephony networks, satellite, cable, and wireless) in both open and classified sources.Unassigned
  • 2818Sanitize and minimize information to protect sources and methods.Unassigned
  • 2840Support identification and documentation of collateral effects.Unassigned
  • 2893Assess, document, and apply a target's motivation and/or frame of reference to facilitate analysis, targeting and collection opportunities.Unassigned
  • 2894Collaborate across internal and/or external organizational lines to enhance collection, analysis and dissemination.Unassigned
  • 2897Conduct analysis of target communications to identify essential information in support of organization objectives.Unassigned
  • 2902Evaluate and interpret metadata to look for patterns, anomalies, or events, thereby optimizing targeting, analysis and processing.Unassigned
  • 2905Identify target communications within the global network.Unassigned
  • 2906Maintain awareness of target communication tools, techniques, and the characteristics of target communication networks (e.g., capacity, functionality, paths, critical nodes) and their potential implications for targeting, collection, and analysis.Unassigned
  • 2909Provide feedback to collection managers to enhance future collection and analysis.Unassigned
  • 2919Perform social network analysis and document as appropriate.Unassigned
  • 2922Tip critical or time-sensitive information to appropriate customers.Unassigned
  • 8011Apply and/or develop analytic techniques to provide better intelligence.Unassigned
  • 8013Apply customer requirements to the analysis process.Unassigned
  • 8023Assist planners in the development of courses of action.Unassigned
  • 8025Be aware of hacker TTPs and methodologies.Unassigned
  • 8063Develop analytical techniques to gain more target information.Unassigned
  • 8064Develop and lead exercises.Unassigned
  • 8065Develop and maintain target profiles using appropriate corporate tools and databases (e.g., Target associations, activities, communication infrastructures, etc.).Unassigned
  • 8081Document and disseminate analytic findings.Unassigned
  • 8090Enable targeting offices to find new sources of collection.Unassigned
  • 8100Evaluate the strengths and weaknesses of the intelligence source.Unassigned
  • 8108Identify and facilitate partner relationships to enhance mission capabilities.Unassigned
  • 8128Lead work role working groups/planning and development forums.Unassigned
  • 8137Manipulate information in mission relevant databases (e.g., converting data, generating reports).Unassigned
  • 8138Mitigate collection gaps.Unassigned
  • 8145Perform network analysis to support new or continued collection.Unassigned
  • 8157Produce digital network intelligence against specific named target sets.Unassigned
  • 8172Provide input to training and mitigation plan based on advancements in hardware and software technologies (e.g., attend training or conferences, reading) and their potential implications.Unassigned
  • 8173Provide intel target recommendations which meet leadership objectives.Unassigned
  • 8178Provide time sensitive support to operations.Unassigned
  • 8191Select, build, and develop query strategies against appropriate collection databases.Unassigned
  • 8205Understand technologies used by a given target.Unassigned

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 296Knowledge of how information needs and collection requirements are translated, tracked, and prioritized across the extended enterprise.Unassigned
  • 912Knowledge of collection management processes, capabilities, and limitations.Unassigned
  • 915Knowledge of front-end collection systems, including traffic collection, filtering, and selection.Unassigned
  • 1056Knowledge of operations security.Unassigned
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3078Knowledge of target methods and procedures.Unassigned
  • 3095Knowledge of internet network addressing (IP addresses, classless inter-domain routing, TCP/UDP port numbering).Unassigned
  • 3106Knowledge of a wide range of basic communications media concepts and terminology (e.g., computer and telephone networks, satellite, cable, wireless).Unassigned
  • 3113Knowledge of target intelligence gathering and operational preparation techniques and life cycles.Unassigned
  • 3129Knowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.).Unassigned
  • 3137Knowledge of basic malicious activity concepts (e.g., footprinting, scanning and enumeration).Unassigned
  • 3146Knowledge of both internal and external customers and partner organizations, including information needs, objectives, structure, capabilities, etc.Unassigned
  • 3154Knowledge of classification and control markings standards, policies and procedures.Unassigned
  • 3158Knowledge of cyber operation objectives, policies, and legalities.Unassigned
  • 3166Knowledge of collection searching/analyzing techniques and tools for chat/buddy list, emerging technologies, VOIP, Media Over IP, VPN, VSAT/wireless, web mail and cookies.Unassigned
  • 3172Knowledge of collection sources including conventional and non-conventional sources.Unassigned
  • 3174Knowledge of the intelligence requirements development and request for information processes.Unassigned
  • 3179Knowledge of common networking devices and their configurations.Unassigned
  • 3181Knowledge of common reporting databases and tools.Unassigned
  • 3219Knowledge of cyber operations.Unassigned
  • 3237Knowledge of denial and deception techniques.Unassigned
  • 3242Knowledge of document classification procedures, policy, resources, and personnel.Unassigned
  • 3262Knowledge of evolving/emerging communications technologies.Unassigned
  • 3281Knowledge of governing authorities for targeting.Unassigned
  • 3288Knowledge of how converged technologies impact cyber operations (e.g., digital, telephony, wireless).Unassigned
  • 3291Knowledge of how internet applications work (SMTP email, web-based email, chat clients, VOIP).Unassigned
  • 3292Knowledge of how modern digital and telephony networks impact cyber operations.Unassigned
  • 3293Knowledge of how modern wireless communications systems impact cyber operations.Unassigned
  • 3296Knowledge of how to collect, view, and identify essential information on targets of interest from metadata (e.g., email, http).Unassigned
  • 3298Knowledge of how to extract, analyze, and use metadata.Unassigned
  • 3324Knowledge of information and collateral intelligence sources.Unassigned
  • 3338Knowledge of intelligence reporting principles, policies, procedures, and vehicles, including report formats, reportability criteria (requirements and priorities), dissemination practices, and legal authorities and restrictions.Unassigned
  • 3346Knowledge of Internet and routing protocols.Unassigned
  • 3367Knowledge of all applicable statutes, laws, regulations and policies governing cyber targeting and exploitation.Unassigned
  • 3368Knowledge of legal considerations in targeting.Unassigned
  • 3382Knowledge of methods to integrate and summarize information from any potential sources.Unassigned
  • 3386Knowledge of midpoint collection (process, objectives, organization, targets, etc.).Unassigned
  • 3407Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).Unassigned
  • 3418Knowledge of organization and/or partner collection systems, capabilities, and processes (e.g., collection and protocol processors).Unassigned
  • 3441Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.Unassigned
  • 3450Knowledge of principles and practices related to target development such as target knowledge, associations, communication systems, and infrastructure.Unassigned
  • 3505Knowledge of strategies and tools for target research.Unassigned
  • 3534Knowledge of target, including related current events, communication profile, actors, and history (language, culture) and/or frame of reference.Unassigned
  • 3542Knowledge of the basic structure, architecture, and design of converged applications.Unassigned
  • 3564Knowledge of the data flow from collection origin to repositories and tools.Unassigned
  • 3582Knowledge of the intelligence frameworks, processes, and related systems.Unassigned
  • 3587Knowledge of targeting cycles.Unassigned
  • 3595Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.Unassigned
  • 3603Knowledge of the principal methods, procedures, and techniques of gathering information and producing intelligence.Unassigned
  • 3608Knowledge of the purpose and contribution of target templates.Unassigned
  • 3616Knowledge of the structure, architecture, and design of modern digital and telephony networks.Unassigned
  • 3617Knowledge of the structure, architecture, and design of modern wireless communications systems.Unassigned
  • 3626Knowledge of the organization’s planning, operations and targeting cycles.Unassigned
  • 3627Knowledge of cryptologic capabilities, limitations, and contributions to cyber operations.Unassigned
  • 4072Knowledge of collection systems, capabilities, and processes.Unassigned
  • 4073Knowledge of the feedback cycle in collection processes.Unassigned
  • 4078Knowledge of target or threat cyber actors and procedures.Unassigned
  • 4079Knowledge of basic cyber operations activity concepts (e.g., footprinting, scanning and enumeration, penetration testing, white/black listing).Unassigned
  • 4085Knowledge of approved intelligence dissemination processes.Unassigned
  • 4086Knowledge of relevant laws, regulations, and policies.Unassigned
  • 4088Knowledge of target communication profiles and their key elements (e.g., target associations, activities, communication infrastructure).Unassigned
  • 4089Knowledge of target communication tools and techniques.Unassigned
  • 4090Knowledge of the characteristics of targeted communication networks (e.g., capacity, functionality, paths, critical nodes).Unassigned
  • 4094Knowledge of networking and internet communications fundamentals (i.e., devices, device configuration, hardware, software, applications, ports/protocols, addressing, network architecture and infrastructure, routing, operating systems, etc.).Unassigned
  • 4095Knowledge of concepts related to websites (e.g., web servers/pages, hosting, DNS, registration, web languages such as HTML).Unassigned
  • 4097Knowledge of network security implementations (e.g., host-based IDS, IPS, access control lists), including their function and placement in a network.Unassigned
  • 4099Knowledge of customer information needs.Unassigned
  • 4106Knowledge of analytic tools and techniques.Unassigned
  • 4165Knowledge of obfuscation techniques (e.g., TOR/Onion/anonymizers, VPN/VPS, encryption).Unassigned
  • 4166Knowledge of computer programming concepts, including computer languages, programming, testing, debugging, and file types.Unassigned
  • 4421Knowledge of Critical Intelligence Communication (CRITIC) identification and reporting process.Unassigned
  • 4423Knowledge of cryptologic and SIGINT reporting and dissemination procedures.Unassigned
  • 4428Knowledge of cybersecurity concepts and principles.Unassigned
  • 4431Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).Unassigned
  • 4460Knowledge of how and when to request assistance from the Cryptanalysis and Signals Analysis and/or CNO.Unassigned
  • 4470Knowledge of intelligence sources and their characteristics.Unassigned
  • 4490Knowledge of methods, tools, sources, and techniques used to research, integrate and summarize all-source information pertaining to target.Unassigned
  • 4523Knowledge of quality review process and procedures.Unassigned
  • 4533Knowledge of SIGINT laws and directives.Unassigned
  • 4570Knowledge of the overall mission of the Cyber Mission Forces (CMF).Unassigned
  • 4578Knowledge of the specific missions for CMF (i.e., Cyber Mission Teams (CMT), National Mission Teams (NMT), Combat Support Team (CST), National Support Team (NST), Cyber Protection Team (CPT)).Unassigned
  • 4582Knowledge of the U.S. SIGINT System (USSS) authorities, responsibilities, and contributions to the cyberspace operations mission.Unassigned
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 3664Skill in identifying how a target communicates.Unassigned
  • 3667Skill in analyzing a target's communication networks.Unassigned
  • 3678Skill in analyzing traffic to identify network devices.Unassigned
  • 3689Skill in applying various analytical methods, tools, and techniques (e.g., competing hypotheses; chain of reasoning; scenario methods; denial and deception detection; high impact-low probability; network/association or link analysis; Bayesian, Delphi, and Pattern analyses).Unassigned
  • 3692Skill in assessing the applicability of available analytical tools to various situations.Unassigned
  • 3708Skill in conducting social network analysis, buddy list analysis, and/or cookie analysis.Unassigned
  • 3737Skill in determining appropriate targeting options through the evaluation of available capabilities against desired effects.Unassigned
  • 3765Skill in disseminating items of highest intelligence value in a timely manner.Unassigned
  • 3771Skill in evaluating data sources for relevance, reliability, and objectivity.Unassigned
  • 3772Skill in evaluating information for reliability, validity, and relevance.Unassigned
  • 3773Skill in evaluating information to recognize relevance, priority, etc.Unassigned
  • 3774Skill in evaluating accesses for intelligence value.Unassigned
  • 3778Skill in exploiting/querying organizational and/or partner collection databases.Unassigned
  • 3787Skill in identifying a target’s communications networks.Unassigned
  • 3797Skill in identifying leads for target development.Unassigned
  • 3803Skill in identifying, locating, and tracking targets via geospatial analysis techniquesUnassigned
  • 3812Skill in interpreting metadata and content as applied by collection systems.Unassigned
  • 3822Skill in managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.Unassigned
  • 3828Skill in navigating network visualization software.Unassigned
  • 3863Skill in recognizing midpoint opportunities and essential information.Unassigned
  • 3864Skill in recognizing relevance of information.Unassigned
  • 3865Skill in recognizing significant changes in a target’s communication patterns.Unassigned
  • 3867ASkill in recognizing technical information that may be used for target development including intelligence development.Unassigned
  • 3873Skill in researching essential information.Unassigned
  • 3885Skill in fusion analysisUnassigned
  • 3890Skill in synthesizing, analyzing, and prioritizing meaning across data sets.Unassigned
  • 3908Skill in using research methods including multiple, different sources to reconstruct a target network.Unassigned
  • 3915Skill in using geospatial data and applying geospatial resources.Unassigned
  • 3923Skill in using non-attributable networks.Unassigned
  • 3951Skill in writing about facts and ideas in a clear, convincing, and organized manner.Unassigned
  • 4118Skill in identifying a target's network characteristics.Unassigned
  • 4121Skill in assessing a target's frame of reference (e.g., motivation, technical capability, organizational structure, sensitivities).Unassigned
  • 4123Skill in conducting research using all available sources.Unassigned
  • 4125Skill in complying with the legal restrictions for targeted information.Unassigned
  • 4128Skill in developing intelligence reports.Unassigned
  • 4129Skill in evaluating and interpreting metadata.Unassigned
  • 4134Skill in identifying intelligence gaps and limitations.Unassigned
  • 4141Skill in providing analysis on target-related matters (e.g., language, cultural, communications).Unassigned
  • 4160Skill in interpreting traceroute results, as they apply to network analysis and reconstruction.Unassigned
  • 4631Skill in geolocating targets.Unassigned
  • 4643Skill in operational use of raw collection databases.Unassigned
  • 4645Skill in performing data fusion from all-source intelligence for geospatial analysis.Unassigned
  • 4651Skill in providing feedback to enhance future collection and analysis.Unassigned
  • 4656Skill in recognizing exploitation opportunities.Unassigned
  • 4659Skill in recognizing the value of survey data.Unassigned
  • 4667Skill in selector normalization.Unassigned
  • 4669Skill in targeting (e.g., selectors).Unassigned

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 244Ability to determine the validity of technology trend data.Unassigned
  • 3001Ability to accurately and completely source all data used in intelligence, assessment and/or planning products.Unassigned
  • 3002Ability to focus research efforts to meet the customer’s decision-making needs.Unassigned
  • 3020Ability to clearly articulate intelligence requirements into well-formulated research questions and requests for information.Unassigned
  • 3021Ability to collaborate effectively with others.Unassigned
  • 3022Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.Unassigned
  • 3039Ability to develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.Unassigned
  • 3043Ability to evaluate, analyze, and synthesize large quantities of data (which may be fragmented and contradictory) into high quality, fused targeting/intelligence products.Unassigned
  • 3044Ability to exercise judgment when policies are not well-defined.Unassigned
  • 3047Ability to function effectively in a dynamic, fast-paced environment.Unassigned
  • 3048Ability to function in a collaborative environment, seeking continuous consultation with other analysts and experts—both internal and external to the organization—in order to leverage analytical and technical expertise.Unassigned
  • 3052Ability to identify intelligence gaps.Unassigned
  • 3073Ability to recognize and mitigate cognitive biases which may affect analysis.Unassigned
  • 3074Ability to recognize and mitigate deception in reporting and analysis.Unassigned
  • 3077Ability to think critically.Unassigned
  • 3081Ability to utilize multiple intelligence sources across all intelligence disciplines.Unassigned
  • 4223Ability to contribute to the collection management processUnassigned

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

No O*NET jobs reach this role.

    Equivalents

    NICE work roles

    From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

    Free · DoD DCWF Tool v5.3 (2026-09-25)

    No published NICE equivalent.

    O*NET jobs it reaches

    Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

    Free · O*NET 30.3

    No O*NET job reaches this role.