Forensic Analyst

Main mission

Investigates incidents: traces, evidence, reconstruction.

5 key responsibilities

• Collect digital evidence without altering it.
• Analyze disks, memory, and logs to reconstruct events.
• Establish the timeline and scope of compromises.
• Write reports admissible in court.
• Improve detection based on lessons learned.

Key skills

Forensics (disk, memory, network), chain of custody, tools (Volatility, X-Ways).

What's expected

State what really happened, supported by evidence: the technical truth after the attack.

Career paths

Lead DFIR, Judicial Expert, Senior Threat Intelligence.