How a digital forensics analyst can use AI, task by task

I work as a digital forensics analyst. Part of my job is to adhere to legal policies and procedures related to handling digital media.

Context: We use Wireshark and Linux; the work draws on computers and electronics, law and government and engineering and technology.
System: [files, servers, apps]
Log excerpt: [paste with personal data removed]

Identify suspicious events, likely explanations, and next checks or actions. Rank causes from most to least likely with a quick test for each, and flag safety risks.

I work as a digital forensics analyst. Part of my job is to perform forensic investigations of operating or file systems.

Context: We use Linux and UNIX; the work draws on computers and electronics, law and government and engineering and technology.
Incident: [what happened, systems or records involved]
Data available: [logs, transactions, images, records]

Propose a step-by-step forensic review: what to preserve first, what to look for in each data source, tools commonly used, and red flags. Remind me of chain-of-custody steps.

I work as a digital forensics analyst. Part of my job is to perform file signature analysis to verify files on storage media or discover potential hidden files.

Context: The work draws on computers and electronics, law and government and engineering and technology.
Incident: [what happened, systems or records involved]
Data available: [logs, transactions, images, records]

Propose a step-by-step forensic review: what to preserve first, what to look for in each data source, tools commonly used, and red flags. Remind me of chain-of-custody steps.

I work as a digital forensics analyst. Part of my job is to recover data or decrypt seized data.

Context: The work draws on computers and electronics, law and government and engineering and technology.
Text: [paste, no personal data]
Language and audience: [describe]

Translate and note terms that need a human check. Use plain language, one everyday analogy, and the questions people are most likely to ask with short answers.

I work as a digital forensics analyst. Part of my job is to write reports, sign affidavits, or give depositions for legal proceedings.

Here's what I have for the reports: [rough notes, the facts, figures and decisions behind it]

Write a clear first draft that I can check and finish. Keep it [one page / short / formal]. Use headings if they help, and mark anything you had to guess with [CHECK].

I work as a digital forensics analyst. Part of my job is to analyze log files or other digital information to identify the perpetrators of network intrusions.

Context: We use Firewall software and Wireshark; the work draws on computers and electronics, law and government and engineering and technology.
Incident: [what happened, systems or records involved]
Data available: [logs, transactions, images, records]

Propose a step-by-step forensic review: what to preserve first, what to look for in each data source, tools commonly used, and red flags. Remind me of chain-of-custody steps.

I work as a digital forensics analyst. Part of my job is to maintain cyber defense software or hardware to support responses to cyber incidents.

Context: We use Wireshark and Linux; the work draws on computers and electronics, law and government and engineering and technology.
System: [cyber tools, applications]
Issue or update: [describe]

List maintenance and update steps. Rank causes from most to least likely with a quick test for each, and flag safety risks.

I work as a digital forensics analyst. Part of my job is to develop policies or requirements for data collection, processing, or reporting.

Area: [data collection, department]
Goals: [what the policy should achieve]

Draft a policy with scope, rules, responsibilities and review dates. Use plain language and headings where they help, and mark anything you had to guess with [CHECK].

I work as a digital forensics analyst. Part of my job is to conduct predictive or reactive analyses on security measures to support cyber security initiatives.

Context: We use Microsoft Excel and Firewall software; the work draws on computers and electronics, law and government and engineering and technology.
System: [network, application, data store]
Evidence: [paste logs, scan results, no secrets]

Identify breaches or weaknesses, severity, and remediation steps. Show your working step by step and give spreadsheet formulas so I can reproduce the numbers.

I work as a digital forensics analyst. Part of my job is to identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities.

Context: We use Microsoft Excel; the work draws on computers and electronics, law and government and engineering and technology.
Project: [system change, network install]
Needs: [users, functions, site]

List hardware, software, cabling and staff needed. Lay it out as a table with steps, owner, timing and what could go wrong, then list the decisions I still need to make.

I work as a digital forensics analyst. Part of my job is to recommend cyber defense software or hardware to support responses to cyber incidents.

Context: The work draws on computers and electronics, law and government and engineering and technology.
Need: [describe]
Options: [list]

Explain recommendations and reasons. Use plain language, one everyday analogy, and the questions people are most likely to ask with short answers.