GIAC Certified Forensic Analyst (GCFA)

GIAC Certified Forensic Analysts (GCFAs) possess the knowledge, skills, and abilities necessary to handle advanced incident handling scenarios, conduct formal incident investigations, and carry out forensic investigation of networks and hosts. The GCFA is an intermediate-level certification, renewable every four years.

To earn the GCFA credential, a candidate must pass a 150-question written examination with a minimum score of 69.3 percent (correct answers to 104 of the 150 questions). The organization that sponsors the GIAC program is SANS, and it provides notification when exams are made available (normally this occurs 7–10 days after completing purchased SANS training, or within 24 hours after purchase ...

Get Computer Forensics JumpStart, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.