GIAC Certified Forensics Analyst (GCFA)
Credential: GIAC Certified Forensics Analyst (GCFA)
Credentialing Agency: Global Information Assurance Certification (GIAC)
Renewal Period: 4 years
The GIAC Certified Forensic Analyst (GCFA) is an intermediate skill level certification for professionals working in the information security, computer forensics, and incident response fields. The certification focuses on core skills required to collect and analyze data from Windows and Linux computer systems. The GCFA certifies that candidates have the knowledge, skills, and ability to conduct formal incident investigations and handle advanced incident handling scenarios, including internal and external data breach intrusions, advanced persistent threats, anti-forensic techniques used by attackers, and complex digital forensic cases. There are no prerequisites for this certification.
More information can be found on the certifying agency's website.
GIAC Certified Forensics Analyst (GCFA)
MINIMUM REQUIREMENTS
Eligibility Requirements (View Details)
- Credential Prerequisite
- Experience
- Education
- Training
- Membership
- Other
- Fee
Note: This credential may have multiple options for becoming eligible. Listed are the minimum requirements based on the minimum degree required. To view other options, see the Eligibility tab.
Exam Requirements (View Details)
- Exam
- Written Exam
- Oral Exam
- Practical Exam
- Performance Assessment
RECERTIFICATION SUMMARY
Renewal Period: 4 years
AGENCY CONTACT INFORMATION
Global Information Assurance Certification (GIAC)
8120 Woodmont Avenue
Suite 205
Bethesda, MD 20814
Phone: (301) 654-7267
Fax: (301) 951-0140
Email: info@giac.org
Other REQUIREMENTS
The GIAC Certified Forensics Analyst (GCFA) credential has the following other requirements:
- All GIAC-certified individuals agree to uphold and be bound by the GIAC Code of Ethics.
Written Exam
- Identification of Malicious System and User Activity
- Incident Response in an Enterprise Environment
- Incident Response Process and Framework
- Timeline Artifact Analysis
- Timeline Collection
- Timeline Processing
- Volatile Artifact Analysis
- Volatile Data Collection
- Windows Filesystem Structure and Analysis
- Windows System Artifact Analysis
Exam Preparation Resources
There are a number of resources available to help you prepare for the GIAC Certified Forensics Analyst (GCFA) examination:
- Best Sources
- General References
- Related Courses
- Related Training
Testing Information
Testing for this credential is handled by Pearson VUE. The test centers are located in the U.S. They also have some test centers on military bases.
To find out more, use the following links on the Pearson VUE website:
For more information on the Global Information Assurance Certification (GIAC) testing process, visit the agency website.
RECERTIFICATION
GIAC Certified Forensics Analyst (GCFA)
Renewal Period: 4 years