Why do you love #DFIR? For me it's: 1) Love problem solving-- DFIR is a constant stream of puzzles (technical and non-technical) 2) Researching how things work-- DFIR is an open field (so much we don't know) 3) Helping others and fighting the good fight
been there... i think you have really have to love this work to stay in it.

Mar 4, 2022 Β· 2:45 PM UTC

5
8
4
42
Replying to @hal_pomeranz
What would you consider to be non-technical puzzles for DFIR? Would this be the softer skill side of things?
1
Soft skills (managing your customer, dealing with local political issues) is definitely part of it. There are also logistical issues around dealing with large amounts of (sometimes remote) evidence that can be fun to solve.
1
Replying to @hal_pomeranz
I interviewed countless candidates for DFIR roles. Those with intellectual curiosity and desire to solve complex problems turned out great analysts.
1
Replying to @hal_pomeranz
1. personal fulfillment - I love protecting people, organizations, leading others through the worst times of their lives. 2. education, being able to be exposed to so many technologies and processes. 3. resolve - every incident (for me) refines my stress management.
2
Replying to @hal_pomeranz
A few reasons: - Constant change. You never know what the next day is going to bring. - IMO DFIR, more so than any other infosec niche, helps those in need the most. We're the firefighters of the industry. - Problem solving - Everything is a puzzle that needs solved.
1
3