Areas Covered

• Windows Forensics and Data Triage
• Windows Registry Forensics, USB Devices, Shell Items, Email Forensics and Log Analysis
• Advanced Web Browser Forensics (Chrome, Edge, Firefox)

Who is GCFE for?

• Anyone interested in a deep understanding of Windows forensics who has a background in information systems, information security, and computers
• Information security professionals
• Incident response team members
• Law enforcement officers, federal agents, and detectives
• Media exploitation analysts

Exam Format

• 1 proctored exam
• 82 Questions
• 3 hours
• Minimum passing score of 70%

Note:GIAC reserves the right to change the specifications for each certification without notice. Based on a scientific passing point study, the passing point for the GISF exam has been determined to be 72% for all candidates receiving access to their certification attempts on or after June 12th, 2018.

Delivery

NOTE: All GIAC Certification exams are web-based and required to be proctored. There are two proctoring options: remote proctoring through ProctorU, and onsite proctoring through PearsonVUE.

Course Details