Document original condition of digital and/or associated evidence (e.g., via digital photographs, written reports, hash function checking).
Core KSAT for the following Work Roles
Conducts deep-dive investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents.
Additional KSAT for the following Work Roles
Identifies, collects, examines, and preserves evidence using controlled and documented analytical and investigative techniques.