Automation index
How much of a Forensic scientist’s job can AI already do?
A lab protocol comes earlier. A result that holds in court without contaminating do not.
This percentage does not predict how many people will lose their jobs.
Task comparison
IS WORK OVER?
Forensic scientist
22%
AI can already do 22% of this job.
#326 / 633
View rankingForensic scientist
Where the time goes
Task weights are our estimates based on O*NET frequency data, not time shares published by O*NET.
The time saving for each task is estimated separately.
| Task | Share | AI | Points |
|---|---|---|---|
Protocol, chain and the sample.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 40% | +6.4 |
Analyse, the blank and the one that contaminates.EstimateNo public source provides a precise figure. This is our estimate. | 18% | 14% | +2.5 |
Report, the link and not jumping.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 28% | +4.5 |
Court, the lawyer and holding.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 22% | +3.5 |
Police haste and not skipping the blank.EstimateNo public source provides a precise figure. This is our estimate. | 18% | 18% | +3.2 |
Hold in court, and not contaminating.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 12% | +1.9 |
| Total | 100% | 22% |
Modelled workweek: 100% · Public evidence: 0% · Estimate: 100% · Confidence: Low
Skills and activities
- chain of custody
- blanks
- forensic samples
- the link
- the hearing
- lab protocols
- expert reports
- contamination
Sources for this job· O*NET 19-4092.00· ESCO/ISCO 3119
IS WORK OVER?
SOC analyst
28%
#80 / 633
View rankingSOC analyst
Where the time goes
Task weights are our estimates based on O*NET frequency data, not time shares published by O*NET.
The time saving for each task is estimated separately.
| Task | Share | AI | Points |
|---|---|---|---|
Triage, SIEM and the alert playbook.EstimateNo public source provides a precise figure. This is our estimate. | 18% | 52% | +9.4 |
The false positive and the one that is ransomware.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 22% | +3.5 |
IOCs, correlation and the ticket.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 40% | +6.4 |
24x7 shift, handoff and the note to the CISO.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 28% | +4.5 |
Contain, isolate and not killing the business.EstimateNo public source provides a precise figure. This is our estimate. | 18% | 14% | +2.5 |
Cut it off in time, and not ignoring the awkward alert.EstimateNo public source provides a precise figure. This is our estimate. | 16% | 12% | +1.9 |
| Total | 100% | 28% |
Modelled workweek: 100% · Public evidence: 0% · Estimate: 100% · Confidence: Low
Skills and activities
- alert triage
- SIEM
- SOC playbooks
- IOCs
- contain incidents
- 24x7 shift
- ransomware
- event correlation
Sources for this job· O*NET 15-1212.00· ESCO/ISCO 2529