Skip to content

Cyber Effects · Work role code 133

Target Analyst Reporter

The Target Analyst Reporter (TAR) provides synthesized products to customers by researching, analyzing, and reporting intelligence via appropriate reporting vehicles in response to customer requirements and IAW missions of SIGINT, cybersecurity, and cyberspace operations. They prioritize, assess, evaluate, and report information obtained from SIGINT collection, cyber surveillance, and reconnaissance operations sources. The TAR enhances reporting with collateral information as required, maintains awareness of internal and external customer requirements, and collaborates with other collectors and analysts to refine collection and reporting requirements. The TAR shares target-related information and provides feedback to customers as appropriate. The TAR develops working aids and provides database updates on target activity to enhance and build target knowledge and improve collection. The TAR performs quality control and product-release functions.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 2001Accurately characterize targets.Unassigned
  • 2081Classify documents in accordance with classification guidelines.Unassigned
  • 2087Collaborate with intelligence analysts/targeting organizations involved in related areas.Unassigned
  • 2089Collaborate with other customer, Intelligence and targeting organizations involved in related cyber areas.Unassigned
  • 2101Identify and conduct analysis of target communications to identify information essential to support operations.Unassigned
  • 2134Conduct target research and analysis.Unassigned
  • 2183Coordinate with other organizations to deconflict reporting.Unassigned
  • 2195Maintain awareness of internal and external cyber organization structures, strengths, and employment of staffing and technology.Unassigned
  • 2236Determine if information meets reporting requirements.Unassigned
  • 2243Determine what technologies are used by a given target.Unassigned
  • 2356Engage customers to understand customers’ intelligence needs and wants.Unassigned
  • 2400Examine intercept-related metadata and content with an understanding of targeting significance.Unassigned
  • 2427Gather information about networks through traditional and alternative techniques, (e.g., social network analysis, call-chaining, traffic analysis.)Unassigned
  • 2429Generate requests for information.Unassigned
  • 2434Identify threat tactics, and methodologies.Unassigned
  • 2441Identify and evaluate threat critical capabilities, requirements, and vulnerabilities.Unassigned
  • 2459AIdentify cyber intelligence gaps and shortfalls.Unassigned
  • 2515Initiate requests to guide tasking and assist with collection management.Unassigned
  • 2542Maintain awareness of advancements in hardware and software technologies (e.g., attend training or conferences, reading) and their potential implications.Unassigned
  • 2568Make recommendations to guide collection in support of customer requirements.Unassigned
  • 2608Monitor target networks to provide indications and warning of target communications changes or processing failures.Unassigned
  • 2621Provide SME and support to planning/developmental forums and working groups as appropriate.Unassigned
  • 2628AProvide subject matter expertise to development of exercises.Unassigned
  • 2715Produce reports based on intelligence information using appropriate formats for dissemination.Unassigned
  • 2719Profile targets and their activities.Unassigned
  • 2770Provide time sensitive targeting support.Unassigned
  • 2779Review appropriate information sources to determine validity and relevance of information gathered.Unassigned
  • 2781Reconstruct networks in diagram or report format.Unassigned
  • 2798Research communications trends in emerging technologies (in computer and telephony networks, satellite, cable, and wireless) in both open and classified sources.Unassigned
  • 2818Sanitize and minimize information to protect sources and methods.Unassigned
  • 2840Support identification and documentation of collateral effects.Unassigned
  • 2893Assess, document, and apply a target's motivation and/or frame of reference to facilitate analysis, targeting and collection opportunities.Unassigned
  • 2894Collaborate across internal and/or external organizational lines to enhance collection, analysis and dissemination.Unassigned
  • 2897Conduct analysis of target communications to identify essential information in support of organization objectives.Unassigned
  • 2902Evaluate and interpret metadata to look for patterns, anomalies, or events, thereby optimizing targeting, analysis and processing.Unassigned
  • 2904Identify cyber threat tactics and methodologies.Unassigned
  • 2905Identify target communications within the global network.Unassigned
  • 2906Maintain awareness of target communication tools, techniques, and the characteristics of target communication networks (e.g., capacity, functionality, paths, critical nodes) and their potential implications for targeting, collection, and analysis.Unassigned
  • 2909Provide feedback to collection managers to enhance future collection and analysis.Unassigned
  • 2912Perform or support technical network analysis and mapping.Unassigned
  • 2919Perform social network analysis and document as appropriate.Unassigned
  • 2922Tip critical or time-sensitive information to appropriate customers.Unassigned
  • 8010Apply analytic techniques to validate information or data in reporting.Unassigned
  • 8011Apply and/or develop analytic techniques to provide better intelligence.Unassigned
  • 8013Apply customer requirements to the analysis process.Unassigned
  • 8022Assist in the mitigation of collection gaps.Unassigned
  • 8023Assist planners in the development of courses of action.Unassigned
  • 8038Conduct pre and post publication actions.Unassigned
  • 8063Develop analytical techniques to gain more target information.Unassigned
  • 8065Develop and maintain target profiles using appropriate corporate tools and databases (e.g., Target associations, activities, communication infrastructures, etc.).Unassigned
  • 8081Document and disseminate analytic findings.Unassigned
  • 8090Enable targeting offices to find new sources of collection.Unassigned
  • 8100Evaluate the strengths and weaknesses of the intelligence source.Unassigned
  • 8101Evaluate threat critical capabilities, requirements, and vulnerabilities.Unassigned
  • 8108Identify and facilitate partner relationships to enhance mission capabilities.Unassigned
  • 8128Lead work role working groups/planning and development forums.Unassigned
  • 8137Manipulate information in mission relevant databases (e.g., converting data, generating reports).Unassigned
  • 8138Mitigate collection gaps.Unassigned
  • 8145Perform network analysis to support new or continued collection.Unassigned
  • 8149Perform quality review and provide feedback on the materials delivered on which analysis and reporting is conducted.Unassigned
  • 8155Prioritize reporting based on SIGINT reporting instructions or other mission reporting priorities.Unassigned
  • 8157Produce digital network intelligence against specific named target sets.Unassigned
  • 8173Provide intel target recommendations which meet leadership objectives.Unassigned
  • 8176Provide SME support for the development and implementation of exercises.Unassigned
  • 8191Select, build, and develop query strategies against appropriate collection databases.Unassigned
  • 8203Understand hacker TTPs and methodologies.Unassigned
  • 8204Understand network components and their functionality to enable analysis and target development.Unassigned
  • 8205Understand technologies used by a given target.Unassigned
  • 8213Verify and validate that network graphics are accurate and comply with reporting policy.Unassigned

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 296Knowledge of how information needs and collection requirements are translated, tracked, and prioritized across the extended enterprise.Unassigned
  • 912Knowledge of collection management processes, capabilities, and limitations.Unassigned
  • 915Knowledge of front-end collection systems, including traffic collection, filtering, and selection.Unassigned
  • 1036Knowledge of applicable laws (e.g., Electronic Communications Privacy Act, Foreign Intelligence Surveillance Act, Protect America Act, search and seizure laws, civil liberties and privacy laws), statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures relevant to work performed.Unassigned
  • 1056Knowledge of operations security.Unassigned
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3078Knowledge of target methods and procedures.Unassigned
  • 3095Knowledge of internet network addressing (IP addresses, classless inter-domain routing, TCP/UDP port numbering).Unassigned
  • 3106Knowledge of a wide range of basic communications media concepts and terminology (e.g., computer and telephone networks, satellite, cable, wireless).Unassigned
  • 3113Knowledge of target intelligence gathering and operational preparation techniques and life cycles.Unassigned
  • 3117Knowledge of all-source reporting and dissemination procedures.Unassigned
  • 3129Knowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.).Unassigned
  • 3137Knowledge of basic malicious activity concepts (e.g., footprinting, scanning and enumeration).Unassigned
  • 3146Knowledge of both internal and external customers and partner organizations, including information needs, objectives, structure, capabilities, etc.Unassigned
  • 3154Knowledge of classification and control markings standards, policies and procedures.Unassigned
  • 3158Knowledge of cyber operation objectives, policies, and legalities.Unassigned
  • 3166Knowledge of collection searching/analyzing techniques and tools for chat/buddy list, emerging technologies, VOIP, Media Over IP, VPN, VSAT/wireless, web mail and cookies.Unassigned
  • 3172Knowledge of collection sources including conventional and non-conventional sources.Unassigned
  • 3174Knowledge of the intelligence requirements development and request for information processes.Unassigned
  • 3179Knowledge of common networking devices and their configurations.Unassigned
  • 3181Knowledge of common reporting databases and tools.Unassigned
  • 3219Knowledge of cyber operations.Unassigned
  • 3225Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).Unassigned
  • 3237Knowledge of denial and deception techniques.Unassigned
  • 3242Knowledge of document classification procedures, policy, resources, and personnel.Unassigned
  • 3262Knowledge of evolving/emerging communications technologies.Unassigned
  • 3288Knowledge of how converged technologies impact cyber operations (e.g., digital, telephony, wireless).Unassigned
  • 3291Knowledge of how internet applications work (SMTP email, web-based email, chat clients, VOIP).Unassigned
  • 3292Knowledge of how modern digital and telephony networks impact cyber operations.Unassigned
  • 3293Knowledge of how modern wireless communications systems impact cyber operations.Unassigned
  • 3296Knowledge of how to collect, view, and identify essential information on targets of interest from metadata (e.g., email, http).Unassigned
  • 3298Knowledge of how to extract, analyze, and use metadata.Unassigned
  • 3324Knowledge of information and collateral intelligence sources.Unassigned
  • 3338Knowledge of intelligence reporting principles, policies, procedures, and vehicles, including report formats, reportability criteria (requirements and priorities), dissemination practices, and legal authorities and restrictions.Unassigned
  • 3346Knowledge of Internet and routing protocols.Unassigned
  • 3382Knowledge of methods to integrate and summarize information from any potential sources.Unassigned
  • 3386Knowledge of midpoint collection (process, objectives, organization, targets, etc.).Unassigned
  • 3407Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).Unassigned
  • 3418Knowledge of organization and/or partner collection systems, capabilities, and processes (e.g., collection and protocol processors).Unassigned
  • 3441Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.Unassigned
  • 3450Knowledge of principles and practices related to target development such as target knowledge, associations, communication systems, and infrastructure.Unassigned
  • 3505Knowledge of strategies and tools for target research.Unassigned
  • 3534Knowledge of target, including related current events, communication profile, actors, and history (language, culture) and/or frame of reference.Unassigned
  • 3542Knowledge of the basic structure, architecture, and design of converged applications.Unassigned
  • 3564Knowledge of the data flow from collection origin to repositories and tools.Unassigned
  • 3582Knowledge of the intelligence frameworks, processes, and related systems.Unassigned
  • 3595Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.Unassigned
  • 3603Knowledge of the principal methods, procedures, and techniques of gathering information and producing intelligence.Unassigned
  • 3608Knowledge of the purpose and contribution of target templates.Unassigned
  • 3616Knowledge of the structure, architecture, and design of modern digital and telephony networks.Unassigned
  • 3617Knowledge of the structure, architecture, and design of modern wireless communications systems.Unassigned
  • 3627Knowledge of cryptologic capabilities, limitations, and contributions to cyber operations.Unassigned
  • 4072Knowledge of collection systems, capabilities, and processes.Unassigned
  • 4073Knowledge of the feedback cycle in collection processes.Unassigned
  • 4078Knowledge of target or threat cyber actors and procedures.Unassigned
  • 4079Knowledge of basic cyber operations activity concepts (e.g., footprinting, scanning and enumeration, penetration testing, white/black listing).Unassigned
  • 4085Knowledge of approved intelligence dissemination processes.Unassigned
  • 4086Knowledge of relevant laws, regulations, and policies.Unassigned
  • 4088Knowledge of target communication profiles and their key elements (e.g., target associations, activities, communication infrastructure).Unassigned
  • 4089Knowledge of target communication tools and techniques.Unassigned
  • 4090Knowledge of the characteristics of targeted communication networks (e.g., capacity, functionality, paths, critical nodes).Unassigned
  • 4094Knowledge of networking and internet communications fundamentals (i.e., devices, device configuration, hardware, software, applications, ports/protocols, addressing, network architecture and infrastructure, routing, operating systems, etc.).Unassigned
  • 4095Knowledge of concepts related to websites (e.g., web servers/pages, hosting, DNS, registration, web languages such as HTML).Unassigned
  • 4097Knowledge of network security implementations (e.g., host-based IDS, IPS, access control lists), including their function and placement in a network.Unassigned
  • 4099Knowledge of customer information needs.Unassigned
  • 4106Knowledge of analytic tools and techniques.Unassigned
  • 4113Knowledge of the request for information process.Unassigned
  • 4165Knowledge of obfuscation techniques (e.g., TOR/Onion/anonymizers, VPN/VPS, encryption).Unassigned
  • 4166Knowledge of computer programming concepts, including computer languages, programming, testing, debugging, and file types.Unassigned
  • 4396Knowledge of basic cloud based technologies and concepts.Unassigned
  • 4421Knowledge of Critical Intelligence Communication (CRITIC) identification and reporting process.Unassigned
  • 4423Knowledge of cryptologic and SIGINT reporting and dissemination procedures.Unassigned
  • 4460Knowledge of how and when to request assistance from the Cryptanalysis and Signals Analysis and/or CNO.Unassigned
  • 4470Knowledge of intelligence sources and their characteristics.Unassigned
  • 4491Knowledge of methods, tools, sources, and techniques used to research, integrate and summarize information pertaining to target.Unassigned
  • 4523Knowledge of quality review process and procedures.Unassigned
  • 4570Knowledge of the overall mission of the Cyber Mission Forces (CMF).Unassigned
  • 4578Knowledge of the specific missions for CMF (i.e., Cyber Mission Teams (CMT), National Mission Teams (NMT), Combat Support Team (CST), National Support Team (NST), Cyber Protection Team (CPT)).Unassigned
  • 4582Knowledge of the U.S. SIGINT System (USSS) authorities, responsibilities, and contributions to the cyberspace operations mission.Unassigned
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 3664Skill in identifying how a target communicates.Unassigned
  • 3667Skill in analyzing a target's communication networks.Unassigned
  • 3678Skill in analyzing traffic to identify network devices.Unassigned
  • 3689Skill in applying various analytical methods, tools, and techniques (e.g., competing hypotheses; chain of reasoning; scenario methods; denial and deception detection; high impact-low probability; network/association or link analysis; Bayesian, Delphi, and Pattern analyses).Unassigned
  • 3692Skill in assessing the applicability of available analytical tools to various situations.Unassigned
  • 3708Skill in conducting social network analysis, buddy list analysis, and/or cookie analysis.Unassigned
  • 3765Skill in disseminating items of highest intelligence value in a timely manner.Unassigned
  • 3771Skill in evaluating data sources for relevance, reliability, and objectivity.Unassigned
  • 3772Skill in evaluating information for reliability, validity, and relevance.Unassigned
  • 3773Skill in evaluating information to recognize relevance, priority, etc.Unassigned
  • 3774Skill in evaluating accesses for intelligence value.Unassigned
  • 3778Skill in exploiting/querying organizational and/or partner collection databases.Unassigned
  • 3787Skill in identifying a target’s communications networks.Unassigned
  • 3797Skill in identifying leads for target development.Unassigned
  • 3803Skill in identifying, locating, and tracking targets via geospatial analysis techniquesUnassigned
  • 3812Skill in interpreting metadata and content as applied by collection systems.Unassigned
  • 3822Skill in managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.Unassigned
  • 3828Skill in navigating network visualization software.Unassigned
  • 3863Skill in recognizing midpoint opportunities and essential information.Unassigned
  • 3864Skill in recognizing relevance of information.Unassigned
  • 3865Skill in recognizing significant changes in a target’s communication patterns.Unassigned
  • 3867Skill in recognizing technical information that may be used for leads to enable remote operations (data includes users, passwords, email addresses, IP ranges of the target, frequency in DNI behavior, mail servers, domain servers, SMTP header information).Unassigned
  • 3867ASkill in recognizing technical information that may be used for target development including intelligence development.Unassigned
  • 3873Skill in researching essential information.Unassigned
  • 3885Skill in fusion analysisUnassigned
  • 3890Skill in synthesizing, analyzing, and prioritizing meaning across data sets.Unassigned
  • 3908Skill in using research methods including multiple, different sources to reconstruct a target network.Unassigned
  • 3915Skill in using geospatial data and applying geospatial resources.Unassigned
  • 3923Skill in using non-attributable networks.Unassigned
  • 3951Skill in writing about facts and ideas in a clear, convincing, and organized manner.Unassigned
  • 4118Skill in identifying a target's network characteristics.Unassigned
  • 4121Skill in assessing a target's frame of reference (e.g., motivation, technical capability, organizational structure, sensitivities).Unassigned
  • 4123Skill in conducting research using all available sources.Unassigned
  • 4125Skill in complying with the legal restrictions for targeted information.Unassigned
  • 4128Skill in developing intelligence reports.Unassigned
  • 4129Skill in evaluating and interpreting metadata.Unassigned
  • 4134Skill in identifying intelligence gaps and limitations.Unassigned
  • 4141Skill in providing analysis on target-related matters (e.g., language, cultural, communications).Unassigned
  • 4160Skill in interpreting traceroute results, as they apply to network analysis and reconstruction.Unassigned
  • 4612Skill in conducting derivative classification IAW organization standards/PolicyUnassigned
  • 4613Skill in conducting quality review of serialized reports and reporting for time-sensitive USCYBERCOM operations.Unassigned
  • 4619Skill in developing and maintaining target profiles.Unassigned
  • 4625Skill in drafting serialized reports to support time-sensitive USCYBERCOM operations.Unassigned
  • 4626Skill in drafting serialized reports to the quality level meeting release standards.Unassigned
  • 4629Skill in executing post publication processes IAW organization standards/PolicyUnassigned
  • 4651Skill in providing feedback to enhance future collection and analysis.Unassigned
  • 4656Skill in recognizing exploitation opportunities.Unassigned
  • 4657Skill in recognizing targeting opportunities and essential information.Unassigned
  • 4662Skill in releasing serialized and time-sensitive reportsUnassigned

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 244Ability to determine the validity of technology trend data.Unassigned
  • 3001Ability to accurately and completely source all data used in intelligence, assessment and/or planning products.Unassigned
  • 3002Ability to focus research efforts to meet the customer’s decision-making needs.Unassigned
  • 3020Ability to clearly articulate intelligence requirements into well-formulated research questions and requests for information.Unassigned
  • 3021Ability to collaborate effectively with others.Unassigned
  • 3022Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.Unassigned
  • 3039Ability to develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.Unassigned
  • 3043Ability to evaluate, analyze, and synthesize large quantities of data (which may be fragmented and contradictory) into high quality, fused targeting/intelligence products.Unassigned
  • 3044Ability to exercise judgment when policies are not well-defined.Unassigned
  • 3047Ability to function effectively in a dynamic, fast-paced environment.Unassigned
  • 3048Ability to function in a collaborative environment, seeking continuous consultation with other analysts and experts—both internal and external to the organization—in order to leverage analytical and technical expertise.Unassigned
  • 3052Ability to identify intelligence gaps.Unassigned
  • 3073Ability to recognize and mitigate cognitive biases which may affect analysis.Unassigned
  • 3074Ability to recognize and mitigate deception in reporting and analysis.Unassigned
  • 3077Ability to think critically.Unassigned
  • 3081Ability to utilize multiple intelligence sources across all intelligence disciplines.Unassigned
  • 4148Ability to review processed target language materials for accuracy and completeness.Unassigned

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

No O*NET jobs reach this role.

    Equivalents

    NICE work roles

    From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

    Free · DoD DCWF Tool v5.3 (2026-09-25)

    No published NICE equivalent.

    O*NET jobs it reaches

    Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

    Free · O*NET 30.3

    No O*NET job reaches this role.