Establishing a career in Digital Forensics

What is Digital Forensics?

The Oxford Dictionary defines 'forensics' as:

"Scientific tests or techniques used in connection with the detection of crime."

Digital forensics is the same, but in relation to digital data such as that from mobile phones, computers, or even 'internet of things' devices and online 'cloud' services such as Facebook and other social media sites.

Why would you want to be a Digital Forensic specialist?

Applying theoretical computer science knowledge to digital forensics is incredibly rewarding – there are very few IT roles that give you the opportunity to directly affect people’s lives in the way that digital forensics does. The fact is our work matters – whether that is helping to ensure a victim of crime receives justice or exonerating the wrongfully accused. You don’t get that sense of achievement in many other professions.

On top of that, the work is interesting and varied. One day you could be interrogating a device to piece together the unique story of a piece of evidence, and the next you could be standing in a court room explaining complex digital findings in language that’s accessible to people who know little of the digital world. Being an expert witness is empowering; and don’t panic, if you work for us you’ll get specialist court room skills training before you’d be expected to take to the witness box!

The digital forensics arena is also constantly evolving, with new updates changing how things work, introducing new artefacts, or even entirely new types of device. I can honestly say after 16 years in the job, I am still learning new things every day.

How I got into Digital Forensics

Broadly speaking there are two types of people who become digital forensics specialists: those who identified digital forensics as a career path and pursed digital forensic qualifications, and those who love computers and technology but want to do more than write code or install hardware. It’s the second group that I fell into. When I graduated with a Computer Science degree in 2008, I hadn’t even heard of digital forensics but, having stumbled into the industry, I’ve never looked back.

How do you get started in Digital Forensics?

With the increasing reliance on technology in every aspect of life, cybercrime, as well as ordinary crimes powered by technology, has become a significant threat. The surge in cybercrime has led to a high demand for digital forensic experts, making it an excellent field to build a career in. We are often asked how to get started in this industry, and the short answer is there isn’t a specific pathway to follow; it’s more about finding things to make yourself stand out.

Entry level positions at Keith Borer Consultants are designed to be accessible to all – you don’t need experience and all training will be provided. It is for this reason that it doesn’t matter to us whether your degree specialised in Digital Forensics or is a more generic type of computing degree, such as Computer Science or Software Engineering – it’s about showing your passion for all things digital and demonstrating you’re capable of learning. It can, however, be hard to differentiate yourself from all of other graduates with equivalent qualification - so what can you do to stand out?

• Attention to detail is key. Writing reports to clearly explain your findings is an important part of the role, and a CV and covering letter don't give us much to go on when deciding whether to interview or not. The fastest way to be rejected is to make mistakes in your CV or covering letter, and spelling 'attention to detail' incorrectly (which I have seen frighteningly often) is an immediate red flag. To avoid falling foul of this make sure you proofread your application thoroughly before you hit send.
• Understand the role. If you can demonstrate that you’re paying attention and not just blindly applying, then that’s a really good start. Customise your CV and covering letter to address the specific needs of the role you’re applying for, and definitely don’t leave the details of an older application in there!
• Read the requirements. I’d always encourage you to apply even if you don’t meet all the requirements of a role (no-one’s a perfect match!) and, if there’s something that might be of key importance to the role that your CV can’t evidence, use your covering letter to explain what you’ve got that could bridge the gap.
• Show your enthusiasm! We like nothing more than seeing someone who is really invested in digital forensics, so maybe:
  - Undertake some free training, such as Magnet Forensics’ Virtual Summit or webinars given by Cellebrite and others to keep experts up-to-date with the latest developments.
  - Watch out for ‘capture the flag’ events from the vendors. These allow you to get experience of realistic scenarios and learn what is required to find the evidence. After the events there are usually many write-ups to help you learn how the experts approached the same problems.
  - Try out some FREE tools to hone your craft - have a look at FTK Imager, iLEAPP or aLEAPP, and UFADE as a starting point, and if you can’t generate your own test data there’s loads of free resources on the NIST website.
  - Listen to podcasts, such as the Digital Forensics Now podcast, which will give you an insight into current issues in the industry.
  - Have a look at the Digital Forensics Discord, which is an excellent resource that includes a lot of guidance for people getting started in the industry. This ‘start me’ page also has a ‘getting started in DFIR’ section which, whilst more US-focussed, still provides useful guidance.
  - Make connections on LinkedIn. There are many experts on there sharing excellent content, but it’s also your opportunity to engage with them and get their guidance.

To sum up, I’ve found a career in digital forensics to be both interesting and rewarding, and I’d recommend that anyone who has a keen interest in all things digital - but doesn’t want to pursue a ‘typical’ IT role - to give it serious consideration. Working at Keith Borer Consultants gives unrivalled insight into the full workings of the justice system, making it the perfect choice for anyone who wants to experience digital forensics in all its glory.

So, if you want a career that allows you to apply technical digital skills in a socially valuable way, keep an eye on our website for upcoming opportunities.

I look forward to seeing your applications!