±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35742
New Yesterday: 3 Visitors: 114

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Whats fundamental skills are needed for a junior analyst?

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

tootypeg
Senior Member
 

Whats fundamental skills are needed for a junior analyst?

Post Posted: Mar 26, 18 13:13

Just trying to construct a list of what fundamental skills are needed for a junior analyst / technician.

I was thinking (non-exhaustive) the following, but would really welcome additions/suggestions:

1. File Identification (signatures etc)
2. File Recovery (carving)
3. Imaging  
 
  

hectic_forensics
Member
 

Re: Whats fundamental skills are needed for a junior analyst

Post Posted: Mar 26, 18 13:25

Attention to detail - especially when it comes to chain of custody and evidence handling!  
 
  

tootypeg
Senior Member
 

Re: Whats fundamental skills are needed for a junior analyst

Post Posted: Mar 26, 18 13:27

Great, evidence handling and Chain of Custody....passed me by that one, scary Shocked Shocked Laughing ....It will go on the list!  
 
  

redcat
Senior Member
 

Re: Whats fundamental skills are needed for a junior analyst

Post Posted: Mar 26, 18 13:58

I think that you’re already overlooking the fundamentals. A surprising number of junior people in this industry (or those that want to be junior people) seem to have no ability to work with technology. Can you pull a hard drive out of a laptop with confidence? Do you understand the basics of how popular operating systems work, networking fundamentals and so on?

If it sounds trite I apologise but I’ve spoken to lots of people who have no interest in tech and think digital forensics would be a good job for them. To me, that’s like wanting to be a mechanic but not liking engines, or a medic with no interest in human biology. If you love tech and work hard you don’t need much more than an understanding of ACPO guidelines (or whatever your local standard is), write blocking, hashing and chain of custody. You can learn the rest on the job if the desire is there and you get into a decent role.  
 
  

athulin
Senior Member
 

Re: Whats fundamental skills are needed for a junior analyst?

Post Posted: Mar 26, 18 15:01

- tootypeg
I was thinking (non-exhaustive) the following, but would really welcome additions/suggestions:

1. File Identification (signatures etc)
2. File Recovery (carving)
3. Imaging


I'd like to see the ‾ of the T. That is, I'd like to see the wide-ranging, though shallow, knowledge of the area. The competence, not the deep and narrow expertise. I'd like to see someone who has most of the jigsaw puzzle pieces, but perhaps is not able to put them all together yet.

File Identification ... I'd want to see basic understanding of the problems of file identification. What does identify a file? How can we know? Far too often it seems that some hazy notion is enough, that the first four bytes (or eight or twelve) somehow always point the finger, and that file(1) is all you need to know as far as tools go. Whoever the junior is, he/she should be able to write a basic file-interpreting program in programming language of choice. (And the 'senior', of course, should be able to evaluate the attempt ...)

File Recovery ... this is an expert area. It's impossible to have this unless file system basics is covered first (a la Carrier), as well as some basic knowledge of software operation coupled with a fairly deep knowledge of at least one important file format to get familir with the theory. Without that knowledge, file recovery is not possible. (Tools? Pfui!)

Imaging ... basic stuff. More or less the standard SANS imaging stuff. The 'beginners' stuff.  
 
  

jaclaz
Senior Member
 

Re: Whats fundamental skills are needed for a junior analyst

Post Posted: Mar 26, 18 15:54

Like redcat, I would put an accent on the character/attitude before anything else, someone with:
1) curiosity
2) ingenuity
3) an inquisitive mind
and some passion for the technology will be good or become good in little time.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

dan0841
Senior Member
 

Re: Whats fundamental skills are needed for a junior analyst

Post Posted: Mar 26, 18 19:34

- jaclaz
Like redcat, I would put an accent on the character/attitude before anything else, someone with:
1) curiosity
2) ingenuity
3) an inquisitive mind
and some passion for the technology will be good or become good in little time.

jaclaz


Fully agree. A proactive, investigative mind is often overlooked and is crucial to being a good investigator, instead of just someone who is purely technical and process driven.  
 

Page 1 of 2
Page 1, 2  Next