Digital Forensics Analysts
H34C experience leading forensic and malware analysis of persistent intrusions transfers directly to examining digital evidence and reconstructing network compromises.
How to prepare: Build a forensic case study using lab-generated intrusion logs and a system image, documenting evidence handling, the intrusion timeline, and findings.
What the civilian work involves
- Adhere to legal policies and procedures related to handling digital media.
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Create system images or capture network settings from information technology environments to preserve as evidence.
Civilian tools and software (examples)
- Linux
- Python
- Splunk Enterprise