Files
digital-forensics-expert/references/skills.md
2026-08-14 17:33:34 +02:00

3.7 KiB

Competences — digital forensics expert

Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/0c448a27-10ec-43ba-b880-d9938bade424).

Essential

  • apply reverse engineering (skill/competence)
  • attack vectors (knowledge)
  • audit techniques (knowledge)
  • check methods (knowledge)
  • computer forensics (knowledge)
  • cyber attack counter-measures (knowledge)
  • cyber security (knowledge)
  • develop information security strategy (skill/competence)
  • digital data processing (nan)
  • educate on data confidentiality (skill/competence)
  • establish an ICT security prevention plan (skill/competence)
  • forensic intelligence (knowledge)
  • gather data for forensic purposes (skill/competence)
  • GDPR (knowledge)
  • ICT infrastructure (knowledge)
  • ICT network security risks (knowledge)
  • ICT security legislation (knowledge)
  • ICT security standards (knowledge)
  • identify ICT security risks (skill/competence)
  • identify ICT system weaknesses (skill/competence)
  • implement ICT network diagnostic tools (skill/competence)
  • information confidentiality (knowledge)
  • levels of software testing (knowledge)
  • manage data for legal matters (skill/competence)
  • manage IT security compliances (skill/competence)
  • operating systems (knowledge)
  • penetration testing tool (knowledge)
  • perform forensic preservations of digital devices (skill/competence)
  • perform ICT security testing (skill/competence)
  • present evidence (skill/competence)
  • provide ICT consulting advice (skill/competence)
  • query languages (knowledge)
  • resource description framework query language (knowledge)
  • secure sensitive customer's information (skill/competence)
  • security engineering (knowledge)
  • security threats (knowledge)
  • tools for ICT test automation (knowledge)
  • use scripting programming (skill/competence)
  • use software for data preservation (skill/competence)
  • use technology for forensics (skill/competence)

Optional

  • Aircrack (penetration testing tool) (knowledge)
  • analyse network configuration and performance (skill/competence)
  • Backbox (penetration testing tool) (knowledge)
  • BlackArch (knowledge)
  • Cain and Abel (penetration testing tool) (knowledge)
  • cloud technologies (knowledge)
  • collect cyber defence data (skill/competence)
  • data storage (knowledge)
  • design computer network (skill/competence)
  • hardware architectures (knowledge)
  • hardware platforms (knowledge)
  • ICT encryption (knowledge)
  • implement ICT security policies (skill/competence)
  • information architecture (knowledge)
  • information security strategy (knowledge)
  • John The Ripper (penetration testing tool) (knowledge)
  • Kali Linux (knowledge)
  • LDAP (knowledge)
  • legal requirements of ICT products (knowledge)
  • LINQ (knowledge)
  • Maltego (knowledge)
  • manage cloud data and storage (skill/competence)
  • MDX (knowledge)
  • Metasploit (knowledge)
  • N1QL (knowledge)
  • Nessus (knowledge)
  • Nexpose (knowledge)
  • OWASP ZAP (knowledge)
  • Parrot Security OS (knowledge)
  • perform data mining (skill/competence)
  • Samurai Web Testing Framework (knowledge)
  • SPARQL (knowledge)
  • THC Hydra (knowledge)
  • use different communication channels (skill/competence)
  • WhiteHat Sentinel (knowledge)
  • Wireshark (knowledge)
  • XQuery (knowledge)

Market evidence (job-ad analysis, 30 ads, as of 2026-07-11)

Share of analyzed job ads mentioning the item (threshold ≥ 20 %). Source: JSearch/Adzuna APIs.

Hard skills

  • digital forensics — 83 %
  • data recovery — 33 %
  • incident response — 30 %
  • forensic analysis — 23 %
  • malware analysis — 20 %
  • evidence preservation — 20 %