Digital Forensics & Evidence Handling
25% of Exam
Evidence acquisition, chain of custody, forensic imaging, and legal considerations
Windows Forensics
25% of Exam
Windows artifacts, registry analysis, event logs, and file system forensics
Memory Forensics
20% of Exam
RAM analysis, process investigation, malware detection, and volatile data extraction
Timeline Analysis
15% of Exam
Super timelines, artifact correlation, and temporal analysis techniques
Advanced Forensic Techniques
15% of Exam
Anti-forensics detection, cloud forensics, and advanced artifact analysis
Start Your Interactive GCFA Study Session
Experience the most engaging way to study for your GCFA certification.
Swipe through expertly crafted study cards covering digital forensics, memory analysis, and advanced forensic techniques.
Enable JavaScript to access the full interactive experience.