Computer security is one of the hottest topics on the certification front — and rightly so. However, many IT professionals are unaware of a security subspecialty that’s becoming increasingly popular, namely computer forensics. The exact job duties of a computer forensics examiner may vary, but often include:
- Collecting and packaging computer hardware and digital evidence in a way that preserves its integrity and the chain of custody.
- Creating an inventory and storing computer-related evidence in a secure manner.
- Examining the contents of digital media, including memory, hard disks, and removable media to view and analyze the data recorded there.
- Using data recovery techniques and software to uncover hidden or deleted data.
- Cracking passwords to obtain access to data.
- Decrypting data that has been protected with encryption.
- Presenting detailed reports and charts to document the results of the examination and analysis.
- Assisting law enforcement agents in preparing search warrants, assisting prosecutors in preparing cases for court, assisting civil litigants in preparing cases, assisting defense attorneys in preparing cases, and/or assisting corporate IT departments in responding to and analyzing security breaches and other incidents.
- Testifying in court in computer crime cases and civil lawsuits involving digital evidence.
Related Courses from New Horizons:
- Computer Hacking Forensics Investigator
- Forensics Bootcamp
0 comments:
Post a Comment