This badge was issued to Andrew Rathbun on 13 Sep 2024.
Expires on 30 Sep 2028
GIAC Experienced Forensics Examiner (GX-FE)
The GIAC Experienced Forensics Examiner (GX-FE) demonstrates that a candidate is qualified for a hands-on Windows forensic analyst role. Certification holders will have validated their ability to analyze a Windows host to uncover evidence that proves a user performed a particular activity on the device.
- Type Certification
- Level Advanced
- Cost Paid
Skills
- Cloud Storage Artifact Analysis
- Identifying Evidence of Application Execution
- Investigating Browser Activity
- Investigating External Device and USB Activity
- Investigating File and Folder Interactions
- Investigating Network Activity and Tracking Physical Device Locations
- Profiling Account Usage
- Profiling System Configurations
- Proving Existence of Files and Recovering Deleted Artifacts
Earning Criteria
Evidence
Analyst
Analyst Number
12