Digital Forensics Analysts
Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.
- Tasks
- 20 tasksNot rated core or supplemental
- Family
- Computer & MathematicalOne of its 38 occupations
- Code
- 15-1299.06SOC 2018: 15-1299
What the work is made of
O*NET lists these 20 tasks but has not rated them core or supplemental. Each is quoted as published, with where it came from.
Not rated: O*NET has not rated it core or supplemental
- Task 1. Adhere to legal policies and procedures related to handling digital media.Not ratedTask 21786Listed by O*NET analysts, November 2020
- Task 2. Analyze log files or other digital information to identify the perpetrators of network intrusions.Not ratedTask 21787Listed by O*NET analysts, November 2020
- Task 3. Conduct predictive or reactive analyses on security measures to support cyber security initiatives.Not ratedTask 21788Listed by O*NET analysts, November 2020
- Task 4. Create system images or capture network settings from information technology environments to preserve as evidence.Not ratedTask 21789Listed by O*NET analysts, November 2020
- Task 5. Develop plans for investigating alleged computer crimes, violations, or suspicious activity.Not ratedTask 21790Listed by O*NET analysts, November 2020
- Task 6. Develop policies or requirements for data collection, processing, or reporting.Not ratedTask 21791Listed by O*NET analysts, November 2020
- Task 7. Duplicate digital evidence to use for data recovery and analysis procedures.Not ratedTask 21792Listed by O*NET analysts, November 2020
- Task 8. Identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities.Not ratedTask 21793Listed by O*NET analysts, November 2020
- Task 9. Maintain cyber defense software or hardware to support responses to cyber incidents.Not ratedTask 21794Listed by O*NET analysts, November 2020
- Task 10. Maintain knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy.Not ratedTask 21795Listed by O*NET analysts, November 2020
- Task 11. Perform file signature analysis to verify files on storage media or discover potential hidden files.Not ratedTask 21796Listed by O*NET analysts, November 2020
- Task 12. Perform forensic investigations of operating or file systems.Not ratedTask 21797Listed by O*NET analysts, November 2020
- Task 13. Perform web service network traffic analysis or waveform analysis to detect anomalies, such as unusual events or trends.Not ratedTask 21798Listed by O*NET analysts, November 2020
- Task 14. Preserve and maintain digital forensic evidence for analysis.Not ratedTask 21799Listed by O*NET analysts, November 2020
- Task 15. Recommend cyber defense software or hardware to support responses to cyber incidents.Not ratedTask 21800Listed by O*NET analysts, November 2020
- Task 16. Recover data or decrypt seized data.Not ratedTask 21801Listed by O*NET analysts, November 2020
- Task 17. Write and execute scripts to automate tasks, such as parsing large data files.Not ratedTask 21802Listed by O*NET analysts, November 2020
- Task 18. Write cyber defense recommendations, reports, or white papers using research or experience.Not ratedTask 21803Listed by O*NET analysts, November 2020
- Task 19. Write reports, sign affidavits, or give depositions for legal proceedings.Not ratedTask 21804Listed by O*NET analysts, November 2020
- Task 20. Write technical summaries to report findings.Not ratedTask 21805Listed by O*NET analysts, November 2020
Where this comes from
Quoted from the U.S. Department of Labor, and credited. Nothing on this page is written by us.
How we copy and credit sources- Published byO*NET 29.0, U.S. Department of LaborEmployment and Training Administration
- ClassificationStandard Occupational Classification 2018, 15-1299
- LicenseCC BY 4.0Free to copy and reuse, with credit
- Changed by usNothing.
More in Computer & Mathematical
37 other occupations in this family, each with its own page.
- Actuaries15 tasks
- Bioinformatics Technicians19 tasks
- Biostatisticians25 tasks
- Blockchain Engineers17 tasks
- Business Intelligence Analysts17 tasks
- Clinical Data Managers21 tasks
- Computer and Information Research Scientists15 tasks
- Computer Network Architects33 tasks
- Computer Network Support Specialists26 tasks
- Computer Occupations, All OtherNo tasks listed
- Computer Programmers17 tasks
- Computer Systems Analysts22 tasks
- Computer Systems Engineers/Architects28 tasks
- Computer User Support Specialists16 tasks
- Data Scientists16 tasks
- Data Warehousing Specialists18 tasks
- Database Administrators18 tasks
- Database Architects25 tasks
- Document Management Specialists23 tasks
- Geographic Information Systems Technologists and Technicians29 tasks
- Health Informatics Specialists17 tasks
- Information Security Analysts11 tasks
- Information Security Engineers20 tasks
- Information Technology Project Managers21 tasks
- Mathematical Science Occupations, All OtherNo tasks listed
- Mathematicians11 tasks
- Network and Computer Systems Administrators20 tasks
- Operations Research Analysts17 tasks
- Penetration Testers22 tasks
- Software Developers19 tasks
- Software Quality Assurance Analysts and Testers30 tasks
- Statisticians19 tasks
- Telecommunications Engineering Specialists26 tasks
- Video Game Designers24 tasks
- Web Administrators35 tasks
- Web and Digital Interface Designers30 tasks
- Web Developers29 tasks
Use this record
Every task on this page is free to reuse, with credit to O*NET. The code and data behind the record are public.
Partner with us
Fund the next pass, contribute data, or build on the record. Tell us what you have in mind.
Partner with us