GCFA — GIAC Certified Forensic Analyst
The advanced GIAC forensics cert and the most respected DFIR credential in enterprise environments alongside GCFE. Covers advanced memory forensics, timeline super-analysis, threat hunting through forensic data, and anti-forensics detection. DoD 8140 approved and expected by most senior DFIR roles. The same MCQ-heavy criticism applies — 25% practical weight means the Applied Knowledge GX-FA tier is the more rigorous option. If you can only get one GIAC forensics cert, GCFA carries more weight than GCFE for senior roles.
| Issuer | GIAC / SANS Institute |
|---|
| Level | expert |
|---|
| Domains | Digital Forensics & Incident Response |
|---|
| Practical weight | 25% |
|---|
| Cost (USD) | 999 |
|---|
| Renewal | 4 years |
|---|
| DoD 8140 | Yes |
|---|
| Skills | advanced_forensic_analysis, memory_forensics, timeline_analysis, malware_triage, threat_hunting, anti_forensics_detection, intrusion_investigation |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap