Digital Forensics Analysts
Analysis of persistent intrusions, malware, and forensic evidence directly supports civilian investigations of compromised systems and network intrusions.
How to prepare: Build a forensic case study in a lab that preserves a system image, reconstructs an intrusion from logs, and documents evidence-handling procedures.
What the civilian work involves
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Conduct predictive or reactive analyses on security measures to support cyber security initiatives.
- Create system images or capture network settings from information technology environments to preserve as evidence.
Civilian tools and software (examples)
- Linux
- Microsoft PowerShell
- Splunk Enterprise