Knowledge ID: K0118

Knowledge Description: Knowledge of processes for seizing and preserving digital evidence. 

Work Roles with this Knowledge:

• Work Role ID: IN-FOR-001
  Work Roles: Law Enforcement/Counterintelligence Forensics Analyst
  Work Role Description: Conducts detailed investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents.
  Category: Investigate
  Specialty Area(s): Digital Forensics
• Work Role ID: IN-FOR-002
  Work Roles: Cyber Defense Forensics Analyst
  Work Role Description: Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation.
  Category: Investigate
  Specialty Area(s): Digital Forensics
• Work Role ID: IN-INV-001
  Work Roles: Cyber Crime Investigator
  Work Role Description: Identifies, collects, examines, and preserves evidence using controlled and documented analytical and investigative techniques.
  Category: Investigate
  Specialty Area(s): Cyber Investigation