GIAC Certified Forensic Examiner
IntermediateDFIRPaid
Validates Windows digital forensics skills including evidence acquisition, registry analysis, file system forensics, and browser artifact analysis. Aligned with SANS FOR500. Widely used in law enforcement, corporate investigations, and DFIR roles.
What you'll prove
- Acquire and preserve digital evidence following forensically sound procedures
- Analyze Windows Registry artifacts for evidence of attacker activity
- Perform file system forensics on NTFS volumes
- Analyze browser artifacts, email, and communication records
- Reconstruct user activity from Windows event logs and artifacts
- Write forensic investigation reports suitable for legal proceedings
Frequently asked
How much does GCFE cost?
GCFE standalone exam costs $949 USD.
Where this fits