Training
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
Can't find what you are looking for?

Let us help.

Contact us
Resources
Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations
Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk with an expert

Digital Evidence Analysts perform in-depth forensic examinations, analyzing volatile memory, hidden artifacts, and encrypted data. They reconstruct events using reverse engineering and packet inspection to support investigations.

What You'll Do

Secure Evidence Management

Acquire, preserve, and securely manage digital evidence ensuring strict adherence to forensic integrity standards and chain of custody rules.

Malware Intrusion Analysis

Analyze malware, intrusions, and forensic artifacts through static, dynamic, and memory dump techniques to identify cybersecurity threats.

Reporting Compliance Communication

Develop detailed technical reports, communicate complex cybersecurity findings, and ensure compliance with privacy and cybersecurity laws.

Similar Roles

Cybercrime Investigation (OPM 221)

NICE: Investigation

Responsible for investigating cyberspace intrusion incidents and crimes. Applies tactics, techniques, and procedures for a full range of investigative tools and processes and appropriately balances the benefits of prosecution versus intelligence gathering.

Explore learning path

Need more guidance about cyber roles?

There are numerous different roles in cybersecurity and where you fit depends on your interest level. SANS New to Cyber offers courses, certifications, and free resources for anyone interested in getting started in cybersecurity.

Explore New to Cyber