Certificate

GIAC CFE focuses on building in-depth digital forensics knowledge of the Microsoft Windows operating systems. A GCFE has an understanding of forensic capabilities and artifacts as a core component of information security. The GCFE has learned to recover, analyze, and authenticate forensic data on Windows systems. They understand how to track detailed user activity on your network and how to organize findings for use in incident response, internal investigations, and civil/criminal litigation. Using skills for validating security tools, enhancing vulnerability assessments, identifying insider threats, tracking hackers, and improving security policies. Whether you know it or not, Windows is silently recording an unimaginable amount of data about you and your users.