HomeCertificationsGCFE (GIAC Certified Forensic Examiner)
Intermediate 1 enrolled

GCFE (GIAC Certified Forensic Examiner)

GIAC/SANS · GCFE

GIAC's Windows forensic examiner certification from SANS. Master Windows artifact analysis, browser forensics, registry analysis, and email forensics.

5 exam domains6 lessons30 questions35h study time
Request access

Exam Details

Questions82
Duration180 min
Passing Score71%
Exam Cost$979

Exam Domains Covered

1

Windows Forensics Fundamentals

1 lessons

2

Browser Forensics

1 lessons

3

Registry Analysis

2 lessons

4

Email Forensics

1 lessons

5

Advanced Artifact Analysis

1 lessons

Sample Practice Questions

Q1. Live forensics is performed on:

A.Only backup tapes
B.Only cloud storage
C.Running systems to capture volatile data before shutdown
D.Only powered-off systems

Enrol in the prep track to see the answer

Q2. Memory forensics can reveal:

A.Only user accounts
B.Encryption keys, running malware, network connections, and passwords
C.Only hardware information
D.Only file system data

Enrol in the prep track to see the answer

Request access to all 30 practice questions

What's Included

Practice Questions

30 practice questions spread across the GCFE exam domains, in a quiz at the end of each lesson.

Study Plan

Enter your exam date and the hours you can study, and get a schedule for working through the domains.

Progress Tracking

See how many lessons you have completed in each of the 5 domains.

How do you start GCFE (GIAC Certified Forensic Examiner) prep?

Request access, then add credits and enrol in this track for 30 credits. You get all 30 practice questions, a study plan and progress tracking.

Request access
Browse all certifications