Recover deleted computer files as evidence in criminal cases.
What does a Computer Forensics Investigator do?
Computer forensics is much like other forms of forensics in that you search for evidence that can’t be seen by the untrained, naked eye. Instead of blood and hair samples, though, you look for evidence buried deep within computer software and hardware. As a computer forensics investigator, your expertise lies in digging through fragments of deleted material to recreate photographs, files, emails, and documents. Commonly, computer forensics investigator are requested during an investigation to dig up evidence for a criminal case. The field of computer forensics investigation provides such valuable support during investigations that police officers often cross-train in computer forensics to specialize in the field. Whether you’re a police officer or private consultant though, your job responsibilities are the same. You use computer software to analyze and reconstruct computer files or financial records useful in the investigation. If you offer services directly related to a criminal case, you will likely be asked to prepare a report, so you need to document every action. In addition, you commonly testify in court. You can expect to have your background, experience, techniques, and knowledge scrutinized. This can be intimidating, so you need to be confident in your skills, and comfortable explaining your methods to a judge and jury. In addition to criminal cases, you might be hired by a private individual to search a spouse’s hard drive for deleted files or photographs. Or you could be asked to dig for buried financial records. Another common chore is finding the origin of emails. Regardless of your task, your self-discipline and integrity are always put to the test.