| 1. | | Prepares complex duplicate back-up copies of computer media. |
| 2. | | Recovers complex deleted computer files, password protected/encrypted files and hidden information. |
| 3. | | Conducts complex searches of computer media for text, data and images. |
| 4. | | Prepares and/or converts complex recovered files and information into format compatible with current needs. |
| 5. | | Evaluates results to determine their validity and to determine whether the information has forensic significance. |
| 6. | | Meets with attorneys, investigators and other related personnel regarding approaches to analysis and results in pretrial conferences. |
| 7. | | Participates in public health preparedness activities, scientific meetings, seminars, and other training as assigned. |
| 8. | | Interprets test results, keeps records of observations and notes, and issues reports of test results. |
| 9. | | Testifies in court regarding computer analyses and the significance of the results as required. |
| 10. | | Performs housekeeping tasks as required, including maintaining related supplies and reference materials. |
| 11. | | Assists in conducting research, method development, and validation of new technical procedures. |
| 12. | | Participates in internal and external proficiency testing programs. |
| 13. | | May review case files, reports and findings of Forensic Scientists I or II (Computer Evidence) for accuracy and completeness. |
| 14. | | May train or oversee training for subordinate laboratory personnel. |
| 15. | | May administer internal proficiency testing, evaluate results and recommend training to improve the quality of laboratory staff. |
| 16. | | May investigate technical problems and propose remedial action. |
| 17. | | May maintain and update quality manual. |
1. | | Thorough knowledge of PC hardware. |
2. | | Thorough knowledge of the internal functioning of, as well as how to operate, various operating systems, including (but not limited to ) MS-DOS, Windows 95/98, Windows NT/2000, Windows XP, and Unix/Linux. |
3. | | Thorough knowledge of computer hardware and components. |
4. | | Thorough knowledge of networking and internet application software. |
5. | | Ability to analyze and evaluate information and observations, and to arrive at and construct logical and sound conclusions. |
6. | | Skill in the use of equipment related to computer evidence analysis. |
7. | | Ability to apply computer evidence analysis procedures, methodology, and formulas to assigned work. |
8. | | Ability to explain analysis techniques, procedures and theories in a clear and concise manner so that non-scientists may understand the significance of the results obtained using these procedures. |
9. | | Ability to manage data base records and maintain accurate records. |
10. | | Ability to communicate effectively, both orally and in writing. |
11. | | Ability to prepare and deliver legal testimony accurately and be cross-examined and remain composed in court. |
12. | | Ability to establish and maintain effective professional relationships. |
13. | | Good judgment. |