Digital Forensics Analysts
Windows-focused tactical forensic analysis and network navigation provide directly transferable experience for examining digital information related to network intrusions.
How to prepare: Complete a Windows forensic lab that includes creating a system image, analyzing digital information, and documenting evidence handling under applicable legal procedures.
What the civilian work involves
- Adhere to legal policies and procedures related to handling digital media.
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Create system images or capture network settings from information technology environments to preserve as evidence.
Civilian tools and software (examples)
- Microsoft PowerShell
- Python