Digital Forensics Analysts, task by task.

Every activity this job is made of, scored on how much of its output software can produce today and linked to what addresses it. What is left over is the job.

SOC code
15-1299.06
Activities scored
6
Handed to agents
5
Grounded in
O*NET 30.3
The tasks · Digital Forensics AnalystsSOC 15-1299.06
88% · agent
85% · agent
82% · agent
80% · agent
75% · agent
15% · you keep
The team5 agents · 5 need no setup
Forensics reporting agent
Microsoft Office software · Python · Docs
● No integration needed
Log analysis agent
Splunk Enterprise · Python · Structured query language SQL
● No integration needed
Security assessment agent
Python · Linux · Bash
● No integration needed
Automation scripting agent
Python · PowerShell · Bash
● No integration needed
Investigation planning agent
Microsoft Office software · Docs · Sheets
● No integration needed
You keep this
Provide sworn testimony and depositions in legal proceedingsMake final determinations on evidence admissibility and chain of custodySign legal affidavits and take personal accountability for forensic findingsApprove investigation conclusions and recommendations for prosecution

Automatability scores estimate how much of a task an agent can reliably do today, grounded in O*NET task data. They are not predictions of job loss.

Start with these three.

The most automatable work in this job, and what actually addresses it. Each one has a page of its own showing every occupation that does it.

Technical documentation and reporting88% · recording, documentation and administration · mostly automatable
Log analysis and network traffic examination85% · analysis and evaluation work · mostly automatable
Security analysis and vulnerability assessment82% · analysis and evaluation work · mostly automatable