Today I passed the GCFE exam, making me GIAC Certified Forensic Examiner number 490. From the GIAC website,
The GCFE certification is for professionals working or interested in the information security, legal and law enforcement industries with a need to understand computer forensic analysis. The certification focuses on core skills required to collect and analyze data from Windows computer systems.
The GCFE certifies that candidates have the knowledge, skills, and ability to conduct typical incident investigations including e-Discovery, forensic analysis and reporting, evidence acquisition, browser forensics and tracing user and application activities on Windows systems.
Rock on! Oddly enough, as I was walking out the door to take the exam, we got a support request from a client who just located a stolen laptop and needs us to do some forensics on it to find out where it’s been. Great timing.