Only 2 days
Classroom
08/01/2025 (Wednesday)
Overview
On this accelerated GIAC Certified Forensic Analyst (GCFA) course, you’ll gain the knowledge and skills to conduct formal incident investigations and handle advanced incident handling scenarios, including internal and external data breach intrusions, advanced persistent threats, anti-forensic techniques used by attackers, and complex digital forensic cases.
In just 2 days, you’ll also learn in detail the following:
- Advanced Incident Response and digital forensics
- Memory forensics, timeline analysis, and anti-forensics detection
- Threat hunting and APT Intrusion Incident Response
At the end of this course, you'll sit the GIAC GCFA exam and achieve your certification. Through Firebrand’s Lecture | Lab | Review methodology, you’ll get access to courseware, exams, and learn from certified instructors in a distraction-free environment.
Curriculum
- Section 1: Enterprise Environment Incident Response
- Section 2: File System Timeline Artifact Analysis
- Section 3: Identification of Malicious System and User Activity
- Section 4: Identification of Normal System and User Activity
- Section 5: Introduction to File System Timeline Forensics
- Section 6: Introduction to Volatile Data Forensics
- Section 7: NTFS Artifact Analysis
- Section 8: Volatile Data Artifact Analysis of Malicious Events
- Section 9: Volatile Data Artifact Analysis of Windows Events
- Section 10: Windows Artifact Analysis
Exam Track
At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:
GIAC Certified Forensic Analyst exam
- Duration: 3 hours
- Number of questions: 82-115
- Passing score: 72%
Prerequisites
There are no formal prerequisites for this accelerated course.
What's Included
Your accelerated course includes:
- Accommodation *
- Meals, unlimited snacks, beverages, tea and coffee *
- On-site exams **
- Exam vouchers **
- Practice tests **
- Certification Guarantee ***
- Courseware
- Up-to 12 hours of instructor-led training each day
- 24-hour lab access
- Digital courseware **
* For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
** Some exceptions apply. Please refer to the Exam Track or speak with our experts.
*** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.
Benefits
Seven reasons why you should sit your course with Firebrand Training
- Two options of training. Choose between residential classroom-based, or online courses
- You'll be certified fast. With us, you’ll be trained in record time
- Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
- Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
- You’ll learn more. A day with a traditional training provider generally runs from 9 am – 5 pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day of quality learning time, with your instructor
- You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
- You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals
*For residential training only. Doesn't apply for online courses
**Some exceptions apply. Please refer to the Exam Track or speak with our experts
Think you are ready for the course? Take a FREE practice test to assess your knowledge! Free Practice Test