GIAC/SANS · GCFA
GIAC's advanced forensic analysis certification. Master enterprise forensics, advanced artifact analysis, timeline reconstruction, and incident response forensics.
Exam Details
1 lessons
2 lessons
1 lessons
2 lessons
Q1. A forensic analyst uses Volatility framework to:
Enrol in the prep track to see the answer
Q2. Which forensic imaging tool creates a bit-for-bit copy of a drive?
Enrol in the prep track to see the answer
30 practice questions spread across the GCFA exam domains, in a quiz at the end of each lesson.
Enter your exam date and the hours you can study, and get a schedule for working through the domains.
See how many lessons you have completed in each of the 4 domains.
Request access, then add credits and enrol in this track for 30 credits. You get all 30 practice questions, a study plan and progress tracking.
Request access