1 year of relevant experience, where the analyst understands the forensic lifecycle and can properly perform scoping activities, evidence acquisitions on a range of devices, and execute forensic analysis at an intermediate level. Experience preserving desktops, laptops, mobile devices, tablets, servers, both cloud and on-premise email implementations, non-traditional cloud data sources, social media, etc., in a forensically sound manner.