Digital Forensics Analysts
Leading forensic and malware analysis of persistent network intrusions transfers directly to examining digital evidence and reconstructing intrusion activity.
How to prepare: Build a lab-based intrusion case report that documents evidence preservation, log analysis, and the legal procedures governing digital-media handling.
What the civilian work involves
- Adhere to legal policies and procedures related to handling digital media.
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Create system images or capture network settings from information technology environments to preserve as evidence.
Civilian tools and software (examples)
- Linux
- Python
- Splunk Enterprise