Computer Forensics Jobs

While computer forensics jobs vary, computer forensics experts analyze digital evidence that can be used in investigations. They may respond to crime scenes, take photographs, record evidence, and take into custody physical evidence such as computers, keyboards, cables, and other equipment. This includes the securing of USB flash drives, disc drives, and other data storage devices.

Valuable Data

When computer forensics teams arrive to a crime scene, they first capture any volatile data in RAM that would be lost when a computer is turned off. The captured data is moved to a secure location for preservation. Captured data may include open documents, images, current network connections, network configurations, contents of RAM, and logon sessions.

Computer forensics experts also focus on gathering the evidence from the hard drive. They can obtain a mirror image back up, which is an evidence#8211;grade backup that meets legal evidence standards.

Strict Procedures to Follow

When a computer forensics team is at a crime scene, it must also start and maintain a strict chain of custody of all digital evidence. Computer forensics professionals must document all serial numbers of the items involved, who handled the evidence and any related information. The chain of custody must also document that no unauthorized person was allowed access to the evidence.

Once the information gathered is at a secure location, computer forensic experts examine the evidence and write a report on the findings. The evidence and report can be used in a court of law to prosecute a criminal case. Computer forensics experts may also provide written, video, or live testimony of their investigation and findings in court.

This computer forensics job description is more specific to law enforcement procedures. However, many of these disciplines are needed in private sector computer forensics jobs.