GIME — GIAC iOS and macOS Examiner
Specialized forensics certification covering Apple's entire ecosystem — iOS devices, macOS computers, and iCloud — which share artifacts and investigation methodologies across the Apple stack. Covers APFS forensics, iOS backup analysis, iCloud evidence acquisition, and macOS-specific artifacts. DoD 8140 approved. As Apple devices become increasingly prevalent in enterprise environments and investigations, GIME fills a gap that GCFE (Windows-focused) and GASF (mobile-focused) don't fully address. Particularly valuable for investigators in corporate environments with Mac fleets or law enforcement dealing with Apple-heavy subjects.
| Issuer | GIAC / SANS Institute |
|---|
| Level | intermediate |
|---|
| Domains | Digital Forensics & Incident Response |
|---|
| Practical weight | 25% |
|---|
| Cost (USD) | 999 |
|---|
| Renewal | 4 years |
|---|
| DoD 8140 | Yes |
|---|
| Skills | ios_forensics, macos_forensics, apple_ecosystem_artifacts, icloud_forensics, apple_file_system_analysis, ios_backup_analysis |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap