The tasks · Digital Forensics AnalystsSOC 15-1299.06
Write reports, summaries, and technical documentationWhat can do this →
88% · agentMostly automatable
Analyze logs, traffic, and security data to identify threatsWhat can do this →
85% · agentMostly automatable
Examine records and digital evidence for criminal investigationsWhat can do this →
82% · agentMostly automatable
Write and execute automation scripts for data parsingWhat can do this →
80% · agentMostly automatable
Develop investigation plans and forensic proceduresWhat can do this →
58% · agentPartly automatable
Testify in legal proceedings and sign affidavitsWhat can do this →
22% · you keepBarely automatable
The team5 agents · 5 need no setup
Forensics reporting agent
Microsoft Word · Microsoft PowerPoint · Docs
● No integration needed
Security analysis agent
Splunk Enterprise · Python · SQL
● No integration needed
Evidence examination agent
AccessData FTK · Python · Microsoft Excel
● No integration needed
Script automation agent
Python · Bash · PowerShell
● No integration needed
Investigation planning agent
Docs · Microsoft Excel · Sheets
● No integration needed
You keep this
Testify in court and sign legal affidavits as expert witnessApprove final forensic findings and investigation conclusionsOwn legal accountability for evidence handling and chain of custodyMake final determinations on criminal activity and prosecution recommendations
Automatability scores estimate how much of a task an agent can reliably do today, grounded in O*NET task data. They are not predictions of job loss.
Start with these three
The most automatable work in this job, and the one tool we would use for each. Every task has a page of its own with the reasoning and every occupation that does it.
