GIAC - Cloud Forensics Responder (GCFR)

The accelerated GIAC Cloud Forensics Responder (GCFR) certification validates a practitioner's ability to track and respond to incidents across the three major cloud providers.

GCFR-certified professionals are well-versed in the log collection and interpretation skills needed to manage rapidly changing enterprise cloud environments.

In just 2 days, you’ll also learn:

• Log generation, collection, storage and retention in cloud environments
• Identification of malicious and anomalous activity that affect cloud resources
• Extraction of data from cloud environments for forensic investigations

At the end of this course, you’ll sit the GIAC exam, and achieve your GIAC Cloud Forensics Responder (GCFR) certification. Through Firebrand’s Lecture | Lab | Review methodology, you’ll get certified at twice the speed of the traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

Audience

This course is ideal for:

• Incident Response Team Members
• SOC Analysts
• Threat Hunters
• Federal Agents and Law Enforcement Professionals
• Experienced Digital Forensic Analysts
• SANS DFIR Alumni looking to round out their forensic skills

• Module 1: AWS Cloud Platform Logging
• The candidate will demonstrate an understanding of the information available from the generation, collection, retention and storage of logs from AWS
• Module 2: AWS Structure and Access Methods
• The candidate will demonstrate an understanding of AWS architectures, logging, data access and the investigative possibilities
• Module 3: Azure & M365 Cloud Platform Logging
• The candidate will demonstrate an understanding of the information available from the generation, collection, retention and storage of logs from Azure & M365
• Module 4: Azure & M365 Structure and Access Methods
• The candidate will demonstrate an understanding of Azure and M365 architectures, logging, data access and the investigative possibilities
• Module 5: Cloud Forensic Artifact Techniques
• The candidate will demonstrate an understanding of the services, tools and resources available to assist with and automate forensic investigations
• Module 6: Cloud Storage Platforms
• The candidate will demonstrate an understanding of the different characteristics of each cloud's storage resources.
• The candidate will demonstrate an understanding of ways to create, secure, access and use each storage type.
• Module 7: Cloud Virtual Machine Architecture
• The candidate will demonstrate an understanding of the different types, configuration and availability of virtual machines offered in each cloud environment.
• Module 8: Cloud-based Attacks
• The candidate will demonstrate an understanding of the tactics and techniques used to attack major cloud provider's computing resources.
• Module 9: GCP and Google Workspace Cloud Platform Logging
• The candidate will demonstrate an understanding of the information available from the generation, collection, retention and storage of logs from GCP and Google Workspace
• Module 10: GCP and Google Workspace Structure and Access Methods
• The candidate will demonstrate an understanding of GCP and Google Workspace architectures, logging, data access and the investigative possibilities
• Module 11: In-Cloud Investigations
• The candidate will demonstrate an understanding of how to collect forensic images and how to extract data from cloud resources to conduct forensic investigations.
• Module 12: Introduction to Enterprise Cloud Digital Forensics and Incident Response
• The candidate will demonstrate an understanding of the most popular cloud concepts. The candidate will demonstrate an understanding of key cloud resources and logs used to facilitate incident response and forensics.
• Module 13: Multi-Cloud Virtual Networking
• The candidate will demonstrate an understanding of each cloud networking topology and the grouping of resources for network communication. The candidate will demonstrate an understanding of the inspection and control of network traffic.

At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered Certification Guarantee:

GIAC Cloud Forensics Responder (GCFR) exam

• Duration: 3 hours
• Format: 1 proctored exam
• Number of questions: 82 Questions
• Passing score: Minimum passing score of 62%

There are no prerequisites for this accelerated course.

Your accelerated course includes:

• Accommodation *
• Meals, unlimited snacks, beverages, tea and coffee *
• On-site exams **
• Exam vouchers **
• Practice tests **
• Certification Guarantee ***
• Courseware
• Up-to 12 hours of instructor-led training each day
• 24-hour lab access
• Digital courseware **

* For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
** Some exceptions apply. Please refer to the Exam Track or speak with our experts.
*** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Seven reasons why you should sit your course with Firebrand Training

1. Two options of training. Choose between residential classroom-based, or online courses
2. You'll be certified fast. With us, you’ll be trained in record time
3. Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
4. Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
5. You’ll learn more. A day with a traditional training provider generally runs from 9 am – 5 pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day of quality learning time, with your instructor
6. You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
7. You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals

• For residential training only. Doesn't apply for online courses
  ** Some exceptions apply. Please refer to the Exam Track or speak with our experts

Think you are ready for the course? Take a FREE practice test to assess your knowledge!  Free Practice Test