What is the GCFE?

The GIAC® Certified Forensic Examiner (GCFE) is a vendor-neutral certification created and administered by the Global Information Assurance Certification (GIAC).

Digital forensics analysis is of paramount importance in today’s computer-centric world. The GCFE provides a way for professionals to demonstrate that they have the necessary skills, knowledge and ability to conduct typical incident investigations, including e-discovery, forensics analysis and reporting, evidence acquisition, web browser forensics, and tracing application and user activities on Windows computer systems.

Obtaining a GCFE certification requires passing a proctored exam that consists of 115 questions. Candidates are given 3 hours to take the exam and will need to have a passing score of at least 71% to earn the certification.

GCFE exam sections include:

  • Analysis and profiling of systems and devices
  • Analysis of file and program activity
  • Acquisition, preparation, and preservation of digital evidence
  • Analysis of user communications
  • Analysis of Windows system user artifacts
  • Fundamental digital forensics
  • Host and application event log analysis
  • Microsoft browser forensics
  • Third-party browser forensics and browser artifact analysis
  • Windows registry artifact analysis
  • Windows registry fundamentals

The GCFE certification is for information technology, information security, law enforcement and legal professionals with a need to understand digital forensics analysis. Examples of these professionals include:

  • Information security professionals that need to analyze employee computer misuse
  • Attorneys tasked with analyzing forensic data
  • Law enforcement professionals involved in cases centering on data stored on Windows computer systems.

The need to analyze computer forensic information is very much in demand today across a variety of industries.

Ethical Hacking Training – Resources (InfoSec)

There is no specific schooling or training necessary to gain GCFE certification. Working professionals may find that their existing experience and knowledge provides a solid foundation to begin training for passing the GCFE exam.

Those with limited computer skills may wish to first obtain an (Read more...)

*** This is a Security Bloggers Network syndicated blog from InfoSec Resources authored by Greg Belding. Read the original post at: http://feedproxy.google.com/~r/infosecResources/~3/3MdylR9Zn_U/