DFIR Analyst
- Location
- Gloucester, England, United Kingdom
artefacts and log analysis. Analyse Microsoft 365 and other cloud-based environments to identify relevant activity, establish timelines, and support attribution of user or threat actor actions. Use digital forensic and eDiscovery tools to investigate incidents, refine large datasets, and develop effective evidence-collection strategies. Support incident response activities … analysing evidence from Windows, Linux, and macOS systems, as well as mobile devices, servers, and cloud environments. Knowledge of incident response methodologies, cyberattack techniques, threat actors, malware behaviour, and digital artefact analysis. Understanding of networking fundamentals, including TCP/IP, routing, subnetting, network architecture, and common network protocols. Familiarity ...