Like many others working in DFIR, I occasionally get asked questions on how to get a job in DFIR. By DFIR, I mean the overall field of digital forensics/incident response/electronic discovery. Sometimes, the questions are loosely asked as if it is easy to get in by someone who thinks they are 'good with computers'. Other times, I am asked by those with computer science graduate degrees and tons of computer experience. The range is quite wide. I am certain that anyone and everyone looking to make a break into DFIR has already Google'd it, found a lot of blog posts, and still are having a difficult time getting in the door. That is just the way it is. Employers feel like they can't find anyone and everyone feels like they can't find an employer to hire them.
I have blogged about this before, and I'm writing again because this is
