Exam Domains

Windows forensics and data triage Windows forensics and data triage Weight not published

Windows Registry forensics, USB devices, shell items, email forensics, and log analysis Windows Registry forensics, USB devices, shell items, email forensics, and log analysis Weight not published

Advanced web browser forensics (Chrome, Edge, Firefox) Advanced web browser forensics (Chrome, Edge, Firefox) Weight not published

Exam Details

Question Typesperformance-based

FormatMultiple Choice

Online ProctoringAvailable

ID RequirementsGovernment-issued photo ID required. ID must match the name on the exam registration. Acceptable forms include passport, driver's license, or national ID card.

RenewalRequired -- Certifications are valid for 4 years. Renewal requires 36 CPE (Continuing Professional Education) credits earned over the 4-year period, plus a $429 renewal fee. Alternatively, candidates may retake the current exam to renew.

PrerequisitesBackground in information systems, information security, and computers

Retake PolicyTwo free practice tests are included with each exam registration. Candidates have a 4-month window to take the exam after registration. Retake fees apply after the first failed attempt. Contact GIAC for specific retake waiting periods.

LanguagesEnglish

GCFE (GIAC Certified Forensic Examiner) (GCFE) Exam Blueprint

Exam Domains

Exam Details

Official Study Resources