Digital Forensics Analysts
Military forensic analysis, persistent-threat intrusion analysis, and adversary eradication experience directly support civilian investigations of compromised systems.
How to prepare: Build a lab case that preserves a system image and analyzes intrusion logs, documenting evidence handling against the legal policies and procedures of a target employer.
What the civilian work involves
- Adhere to legal policies and procedures related to handling digital media.
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Create system images or capture network settings from information technology environments to preserve as evidence.
Civilian tools and software (examples)
- Linux
- Microsoft PowerShell
- Splunk Enterprise