Digital Forensics Analysts
Tactical forensic analysis and network navigation experience transfer directly to examining digital information associated with network intrusions.
How to prepare: Complete a practice investigation that preserves a system image, analyzes its logs, and documents digital-media handling procedures.
What the civilian work involves
- Adhere to legal policies and procedures related to handling digital media.
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Create system images or capture network settings from information technology environments to preserve as evidence.
Civilian tools and software (examples)
- Linux
- Python
- Splunk Enterprise