What does a Forensic Expert do

Question

I have heard the term "Forensics" usually in murder solving or criminal cases. I also saw a job role called "CyberSecurity Forensic Expert". What is the job of a Forensic guy in IT field?

Answer 1

Hey Karan, a Cyber Security Forensic Expert analyze a security breach to determine how it happened and try to collect the evidence to prove who would have committed the breach. You can also be asked to train the first responders to deal with any electronics such as computers, hard drives or portable drives. If any electronics are tampered with, your investigation might lose information or break the chain of evidence, rendering any evidence tainted and inadmissible in a court. A Forensic Expert is called in once a security breach has been discovered.

Answer 2

Hey! Basicaly, a Forensic Expert is like the detective in a crime movie but the only difference is that a Forensic Expert looks for digital evidence. And the crime in movies is the CyberCrime for the Forensic Expert.

These are the things that a Forensic Expert usually does:

• Investigate data breach and security incident
• Recover and examine data from computers and electronic storage devices possibly involved in the crime
• Try to retrieve lost data by dismantling and rebuilding damaged systems
• Collect evidence for legal cases
• Prepare evidence for trial
• Discuss with the attorneys about electronic evidence in a case
• Train law enforcement officers on computer evidence procedures
• Research on new techniques of CyberCrime and learn how to identify them/avoid them

Answer 3

Hi,

A CyberSecurity Forensic determines how evidence should be collected from a crime scene and what to gather for testing. They also have to look for and analyze physical evidence. This involves taking photographs and evidence from the crime scene and/or making sketches