3.3 KiB
3.3 KiB
name, description
| name | description |
|---|---|
| digital-forensics-expert | Occupational skill for the role 'digital forensics expert' (also: computer forensics consultant, computer forensics investigator, computer forensics expert, digital forensics analyst, digital forensics specialist, digital forensics experts). Use when the user asks for typical digital forensics expert work such as: Adhere to legal policies and procedures related to handling digital media.; Analyze log files or other digital information to identify the perpetrators of network intrusions.; Conduct predictive or reactive analyses on security measures to support cyber security initiatives. |
Digital Forensics Expert
Digital forensics experts retrieve and analyse information from computers and other types of data storage devices. They examine digital media that may have been hidden, encrypted or damaged, in a forensic manner with the aim to identify, preserve, recover, analyse and present facts and opinions about the digital information.
Core workflow
- Adhere to legal policies and procedures related to handling digital media.
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Conduct predictive or reactive analyses on security measures to support cyber security initiatives.
- Create system images or capture network settings from information technology environments to preserve as evidence.
- Develop plans for investigating alleged computer crimes, violations, or suspicious activity.
- Develop policies or requirements for data collection, processing, or reporting.
- Duplicate digital evidence to use for data recovery and analysis procedures.
- Identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities.
How to use this skill
- Read references/profile.md for the occupation profile and scope.
- Consult references/tasks.md for the full task and activity inventory.
- Check references/skills.md for essential vs. optional competences.
- Check references/tools.md for the software commonly used in this role.
- See references/ai-skills.md — matched external AI agent skills (per-source attribution).
Key competences (essential)
- apply reverse engineering
- attack vectors
- audit techniques
- check methods
- computer forensics
- cyber attack counter-measures
- cyber security
- develop information security strategy
- digital data processing
- educate on data confidentiality
- establish an ICT security prevention plan
- forensic intelligence
- gather data for forensic purposes
- GDPR
- ICT infrastructure
Hot technologies
- Kubernetes
- Slack
- IBM Terraform
- Amazon Web Services AWS software
- Microsoft Access
- ServiceNow
- Structured query language SQL
- C
- Go
- Microsoft Azure software
Hot technologies
Top tools from 30 gated job ads (see references/market.md, as of 2026-07-11):
- X-Ways — 33 %
- EnCase — 30 %
- Cellebrite — 23 %
- FTK — 23 %
- Magnet Axiom — 13 %
- Axiom — 10 %
- Forensic Explorer — 10 %
- Nuix — 10 %
- Oxygen Forensic® — 10 %
Sources: ESCO v1.2.1 (http://data.europa.eu/esco/occupation/0c448a27-10ec-43ba-b880-d9938bade424), ONET 30.3 (15-1299.06). See manifest.json for licensing/attribution.*