Computer Forensics Technician

Computer Forensics Technician interprets data and this page includes 19 real tasks that show how to turn measurements into choices. Tasks explain what numbers matter and how to present them to colleagues. Each one shows where we found it, and comes with an AI prompt you can copy and use straight away.

19evidenced tasks
19ready prompts
7tools of the trade
19-4092.00O*NET-SOC code
19,120hold this job (US, BLS 2025)
$72,060median pay/yr (US)
Open Computer Forensics Technician in the interactive atlas →

What it pays

Government survey numbers — not estimates, not ads.

Half of all Forensic Science Technicians in the U.S. earn more than $72,060 a year — the middle 80% land between $48,250 and $117,250. About 19,120 people in the U.S. do this work. Figures are for the U.S. occupation group “Forensic Science Technicians”. (U.S. Bureau of Labor Statistics survey, published 2025.) In India, Professionals earn about ₹38,298 a month on average — around ₹4.6 lakh a year (government PLFS survey via ILOSTAT, occupation-family figure).
$72,060typical pay / year
19,120people in this work
$117,250+top 10% earn
₹4.6 lakha year in India (family avg)
Think you get this job?Six quick questions on how it really works — with a hint and the reason behind every answer.
Test yourself →

The work, task by task

These are the real jobs-to-be-done, not a wish list. Each task shows where we found it, and the prompt underneath is written for that exact task.

Keeping the record2

Reconstruct crime scenes

+
Reconstruct the scene at 423 Maple by layering measured photos, CAD measurements, witness statements and…
Reconstruct the scene at 423 Maple by layering measured photos, CAD measurements, witness statements and chain-of-custody notes into a single scene diagram that shows camera positions, evidence locations and likely movement paths by Thursday noon for the detective.
The tools that do the workComputer aided design and drafting CADDjob descriptionsO*NET

Operate and maintain laboratory equipment

+
Bring the mass spectrometer, the lat pulser and the microscope up to operational tolerance, run calibration…
Bring the mass spectrometer, the lat pulser and the microscope up to operational tolerance, run calibration checks, document deviations, schedule any service needed, and confirm all instruments are signed off for case 2024-117 by Friday.
The tools that do the workLinuxjob descriptionsO*NET
Analysing2

Examine and analyze blood stain patterns

+
Examine the documented bloodstain photos and measured droplet data from 423 Maple, reconstruct angles of…
Examine the documented bloodstain photos and measured droplet data from 423 Maple, reconstruct angles of impact and origin points, produce annotated diagrams showing interpretation and uncertainty for the prosecutor by Wednesday morning.
The tools that do the workComputer aided design and drafting CADDjob descriptionsO*NET

Perform tests on weapons or substances

+
Perform chemical and ballistic tests on the seized knife and white powder from evidence locker B3, record…
Perform chemical and ballistic tests on the seized knife and white powder from evidence locker B3, record chain of custody, run reagent and ballistic comparison results, and deliver a short findings memo to the lab supervisor today.
The tools that do the workLinuxjob descriptionsO*NET
Get approval1

Testify as expert witnesses in court

+
Prepare my expert packet for the municipal court: summarize methods, list tested items, attach calibrated…
Prepare my expert packet for the municipal court: summarize methods, list tested items, attach calibrated instrument logs, draft direct testimony and a one-page exhibit list, then send it to the prosecutor and defense counsel by Monday morning.
The tools that do the workMicrosoft WordMicrosoft Outlookjob descriptionsO*NET
The daily work14

Train new technicians in forensic techniques

+
Train Jenna, Marcus and Luis next Tuesday on file system acquisition, write the hands-on lab plan, run one…
Train Jenna, Marcus and Luis next Tuesday on file system acquisition, write the hands-on lab plan, run one live acquisition from a seized laptop, verify checksum procedures, and leave a one-page troubleshooting cheat sheet on the bench.
The tools that do the workLinuxjob descriptionsO*NET

Review forensic reports for technical merit

+
Review the Sanchez case forensic report for technical merit, confirm the image hashes, verify tool versions…
Review the Sanchez case forensic report for technical merit, confirm the image hashes, verify tool versions and timelines, annotate any unsupported conclusions, and return it with redlines to Detective Hsu by Thursday.
The tools that do the workMicrosoft WordMicrosoft Exceljob descriptionsO*NET

Compare objects and impression marks

+
Compare the two shoeprint casts from the alley and the suspect’s boot, photograph impressions at scale,…
Compare the two shoeprint casts from the alley and the suspect’s boot, photograph impressions at scale, overlay the casts to check matching ridge patterns and measure class characteristics, then summarise percentage match and uncertainty for Sergeant Ortiz.
The tools that do the workAdobe Photoshopjob descriptionsO*NET

Examine firearms to determine mechanical condition and legal status, performing restoration work on damaged firearms to obtain information, such as serial numbers.

+
Examine the recovered pistol for mechanical condition and legal status, check proof marks and chamber…
Examine the recovered pistol for mechanical condition and legal status, check proof marks and chamber markings, attempt controlled restoration of the obliterated serial number, photograph each step, and document chain-of-custody results for Chief Rivera.
The tools that do the workMicrosoft WordO*NET

Create photographic and sketch-based documentation

+
Create photographic and sketch-based documentation of the crime-scene workstation: capture overall, mid-range…
Create photographic and sketch-based documentation of the crime-scene workstation: capture overall, mid-range and close-up shots with scale, produce an annotated sketch showing device locations and cable runs, then assemble a print-ready evidence packet for the prosecutor.
The tools that do the workMicrosoft VisioMicrosoft Wordjob descriptions

Operate digital media analysis tools

+
Run a full imaging and triage on the seized phone, extract recoverable artifacts, generate a timeline of user…
Run a full imaging and triage on the seized phone, extract recoverable artifacts, generate a timeline of user activity, flag any relevant files for the detective, and save a forensic image and report to the case folder.
The tools that do the workLinuxjob descriptions

Wear appropriate protective gear

+
Don the lab coat, nitrile gloves, eye protection, and ESD wrist strap before handling any exhibits today;…
Don the lab coat, nitrile gloves, eye protection, and ESD wrist strap before handling any exhibits today; verify each item is intact and logged on the chain-of-custody sheet, then sign the PPE checklist for case 2026-047.
The tools that do the workLinuxESCOsee the evidence ↗

Calibrate laboratory equipment

+
Run the calibration routine on the forensic imaging rig using the lab calibration standard, record pre- and…
Run the calibration routine on the forensic imaging rig using the lab calibration standard, record pre- and post-calibration readings on the equipment log for serial 3A-112, and notify the lab manager if any value falls outside the accepted tolerance.
The tools that do the workMicrosoft ExcelESCOsee the evidence ↗

Observe laboratory activities

+
Observe the evidence-handling workbench during the 0900–1200 shift, note who accessed each workstation,…
Observe the evidence-handling workbench during the 0900–1200 shift, note who accessed each workstation, confirm proper PPE and chain-of-custody labels were used, photograph any anomalies, and file a signed observation report before leaving at noon.
The tools that do the workMicrosoft WordAdobe PhotoshopESCO

Support life science professionals

+
Assist the virology team with imaging a suspect device this afternoon: prepare the workspace, verify PPE and…
Assist the virology team with imaging a suspect device this afternoon: prepare the workspace, verify PPE and decontamination steps, hand over documented media images to Dr. Ramos with a brief on acquisition settings and timestamps.
The tools that do the workMicrosoft OutlookMicrosoft WordESCO

Record test sequences

+
Record the full test sequence for the device extraction starting 1400: log each command, start and end…
Record the full test sequence for the device extraction starting 1400: log each command, start and end timestamps, operator name, equipment calibration state, and save the sequence log as an incident file immediately after completion.
The tools that do the workMicrosoft ExcelLinuxESCO

Prepare samples for testing

+
Prepare seized mobile devices for imaging: verify seals, don nitrile gloves, label each handset with evidence…
Prepare seized mobile devices for imaging: verify seals, don nitrile gloves, label each handset with evidence ID, note battery state and serial numbers, place devices in Faraday sleeves, and complete the sample prep checklist before imaging.
The tools that do the workMicrosoft WordESCOsee the evidence ↗

Laboratory techniques

+
Perform the standard laboratory technique validation on the write-blocker and imaging station at 0800: run…
Perform the standard laboratory technique validation on the write-blocker and imaging station at 0800: run the calibration verification sample, record readings, document any deviation from thresholds, and update the equipment maintenance log if service is required.
The tools that do the workMicrosoft ExcelMicrosoft WordESCOsee the evidence ↗

Operate scientific measuring equipment

+
Operate the forensic imager to collect clock-synced hashes from the seized laptop: confirm imager…
Operate the forensic imager to collect clock-synced hashes from the seized laptop: confirm imager calibration, note probe and serial numbers, record acquisition duration and hash results, then secure the image and append the verification record.
The tools that do the workLinuxMicrosoft WordESCOsee the evidence ↗

Says who?

These are the pages we read to build this. Open any of them and check us.

O*NET 19-4092.00BLS pay surveyBLS OEWS 2025UK NOS SFJCN803UK NOS SFJCN403UK NOS SFHHPC8ESCOwarnerpacific.eduwvu.eduonlineprograms.appstate.eduwhat people in this job say

The logs, files & records this job keeps

Shared with other careers — the same record means something different in each.

maintenanceimagingcasecalibrationlaboratory

Related careers

Same family of work — each with its own tasks and prompts.

Forensic ChemistForensic ScientistCrime Scene Investigator CsiForensic PathologistForensic ToxicologistForensic BiologistDna AnalystFingerprint ExaminerTrace Evidence AnalystBallistics Examiner
The LLOS Work Atlas is the world's largest evidenced task library — a map of human work, with a ready prompt behind every task. 1,774 careers · every task named by the sources that witnessed it — O*NET, ESCO, real job descriptions, Wikipedia — and the deepest tasks by several at once. And it is honest about limits: where AI cannot help, the map says so.

The rest of the map

Same library, five ways in.

Work Atlasthe whole map, interactiveCareers1,949 jobs and their real tasksSoft skillsthe human part of the workSoftwaretools, by the work they doActivities500 things people doPrompt Librarybrowse every prompt
Copyright © LLOS.ai · 2026 — original pedagogy, voice, and design — all rights reserved.
Built on public evidence: O*NET®, ESCO, Wikipedia, U.S. Bureau of Labor Statistics, ILOSTAT. All sources & licenses