# Digital Forensics Analysts

> Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.

- **SOC code:** 15-1299.06
- **Canonical URL:** https://singulariki.com/roles/role-15-1299-06
- **Also known as:** Cyber Analyst, Cyber Defense Analyst, Cyber Digital Forensics, Cyber Digital Media Analyst, Cyber Forensics Analyst, Cyber Intelligence Analyst, Cyber Threat Analyst, Cyber Threat Hunter
- **Frame:** "AI exposure" means task overlap (how codifiable the work is), not jobs lost or a forecast. Every figure below is traced to a named public dataset.

## What this work is

**Core tasks** (O*NET):
- Adhere to legal policies and procedures related to handling digital media.
- Analyze log files or other digital information to identify the perpetrators of network intrusions.
- Conduct predictive or reactive analyses on security measures to support cyber security initiatives.
- Create system images or capture network settings from information technology environments to preserve as evidence.
- Develop plans for investigating alleged computer crimes, violations, or suspicious activity.
- Develop policies or requirements for data collection, processing, or reporting.
- Duplicate digital evidence to use for data recovery and analysis procedures.
- Identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities.
- Maintain cyber defense software or hardware to support responses to cyber incidents.
- Maintain knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy.
- Perform file signature analysis to verify files on storage media or discover potential hidden files.
- Perform forensic investigations of operating or file systems.

## Skills, tools, capabilities

**Skills in demand:**
- Linux _(Specialized Skill)_
- Unix _(Specialized Skill)_
- ServiceNow _(Specialized Skill)_
- Microsoft Windows _(Common Skill)_
- Microsoft PowerPoint _(Common Skill)_
- Microsoft Excel _(Common Skill)_
- Microsoft Access _(Specialized Skill)_
- Kubernetes _(Specialized Skill)_
- Apple IOS _(Specialized Skill)_
- Wireshark _(Specialized Skill)_
- OpenVAS _(Specialized Skill)_
- Metasploit _(Specialized Skill)_

**Tools & technology:**
- Amazon Web Services AWS software _(hot technology, in demand)_
- Linux _(hot technology, in demand)_
- Microsoft PowerShell _(hot technology, in demand)_
- Python _(hot technology, in demand)_
- Splunk Enterprise _(hot technology, in demand)_
- Structured query language SQL _(hot technology, in demand)_
- Ansible software _(hot technology)_
- Apple iOS _(hot technology)_
- Apple macOS _(hot technology)_
- Bash _(hot technology)_
- Border Gateway Protocol BGP _(hot technology)_
- C _(hot technology)_

## AI exposure & outlook

- **AI task-overlap index:** 97th percentile (High) across all occupations — composite of current-era exposure studies (ai-exposure-index-v1).
- **LLM task exposure, γ (OpenAI / Eloundou):** 95th percentile (High) — source: eloundou_gamma.
- **AI assistant applicability (Microsoft):** 88th percentile (High) — source: microsoft_applicability.
- **Projected employment (BLS 2024–34):** 8.2% growth (Growing fast); 31.3k annual openings; 472k → 510.5k jobs.
- **Pay & employment (BLS OEWS, May 2024):** median $108,970; 439,380 employed.

## Sources

- **O*NET** (30.3) — U.S. Department of Labor / National Center for O*NET Development. https://www.onetcenter.org/database.html
- **BLS Occupational Employment and Wage Statistics (OEWS)** (May 2024) — U.S. Bureau of Labor Statistics. https://www.bls.gov/oes/
- **BLS Employment Projections** (2024–2034) — U.S. Bureau of Labor Statistics. https://www.bls.gov/emp/
- **Microsoft “Working with AI”** (working-with-ai) — Microsoft Research. https://www.microsoft.com/en-us/research/
- **“GPTs are GPTs” (Eloundou et al.)** (arXiv 2303.10130) — OpenAI / academic. https://arxiv.org/abs/2303.10130

---
_Generated from Singulariki's joined dataset; data snapshot 2026-06-02T21:00:32.945303+00:00. https://singulariki.com/roles/role-15-1299-06_