How exposed to AI is a Digital Forensics Analyst?

Of the 20 tasks O*NET lists for digital forensics analysts, 7 could be done in half the time with a chat window today. 1 cannot be sped up at all. Here is which.

Exposure means published research judged an AI could halve the time a task takes, at the same quality. It does not mean the task stops needing a person. How to read this


Also called
Reachable today Needs software built first Cannot be sped up
20
tasks rated for this occupation
370k
people do this job in the US
12 of 36
least protected in computing and maths

Every task, and what AI can do with it

These are O*NET's task statements for this occupation, exactly as written, sorted into the three bands by the ratings behind this report. Nothing has been reworded.

Reachable with a chat window today

7
  • Create system images or capture network settings from information technology environments to preserve as evidence
  • Develop policies or requirements for data collection, processing, or reporting
  • Maintain cyber defense software or hardware to support responses to cyber incidents
  • Recommend cyber defense software or hardware to support responses to cyber incidents
  • Recover data or decrypt seized data
  • Write cyber defense recommendations, reports, or white papers using research or experience
  • Write technical summaries to report findings

Only with software built on top

12
  • Adhere to legal policies and procedures related to handling digital media
  • Analyze log files or other digital information to identify the perpetrators of network intrusions
  • Conduct predictive or reactive analyses on security measures to support cyber security initiatives
  • Develop plans for investigating alleged computer crimes, violations, or suspicious activity
  • Duplicate digital evidence to use for data recovery and analysis procedures
  • Identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities
  • Maintain knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy
  • Perform file signature analysis to verify files on storage media or discover potential hidden files
  • Perform forensic investigations of operating or file systems
  • Perform web service network traffic analysis or waveform analysis to detect anomalies, such as unusual events or trends
  • Preserve and maintain digital forensic evidence for analysis
  • Write and execute scripts to automate tasks, such as parsing large data files

Cannot be sped up

1
  • Write reports, sign affidavits, or give depositions for legal proceedings
What this does not say

This is not a prediction about your job

Nobody surveyed an employer. Tasks are counted equally, so a percentage here is a share of the list rather than a share of your week. And the ratings were made in 2023, which makes every figure a floor rather than a ceiling.

It must never be used to select anyone for redundancy. The full limits are here.

Where to go next

This is the standard task list for the title. The useful next question is which of the tasks you actually do should go near AI, and which should not.


Exposure ratings from Eloundou, Manning, Mishkin and Rock, GPTs are GPTs: Labor market impact potential of LLMs, Science 384, 1306–1308, 2024, used under the MIT licence. This page includes information from the O*NET Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA), used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA. People Team AI has modified all or some of this information. USDOL/ETA has not approved, endorsed, or tested these modifications. Employment figures from the US Bureau of Labor Statistics.