o 4-6 experience in DFIR
o Hands on experience with forensic tools such as FTK, Magnet Axiom,
o Mobile forensics such as UFED, MSAB etc.
o Knowledge of forensic imaging, chain of custody,
o Evidence gathering techniques like TRIAGE, live memory dump techniques
o Positive knowledge on forensic artefacts windows, Linux and Mac
o Certification such ACE, CHFI, Autopsy and other similar certifications
o Experience in handling investigations related to XDR
o Good knowledge of latest endpoint/Server based attacks
o Knowledge of IR process, Ticketing tools