2340x500-focus-difr.jpg

Digital Forensics and Incident Response Certifications

It takes intuition and specialized skills to find hidden evidence and hunt for elusive threats. GIAC's Digital Forensics and Incident Response certifications encompass abilities that DFIR professionals need to succeed at their craft, confirming that professionals can detect compromised systems, identify how and when a breach occurred, understand what attackers took or changed, and successfully contain and remediate incidents. Keep your knowledge of detecting and fighting threats up to date - and your work role secure - with DFIR certifications.
Operating System & Device In-DepthIncident Response & Threat Hunting

Operating System & Device In-Depth Certifications

Prove your ability to detect, respond to, and recover from an attack.
GIME
GBFA
GCFE
GASF

Incident Response & Threat Hunting Certifications

Prove your mastery of essential skills needed to defend the enterprise.
GCFR
GCFA
GNFA
GCTI
GREM
GCIH
GRID
GIAC Experienced Forensics Analyst
2340x500-generic-quote.jpg

"Intrusion detection, incident response and digital forensics are my everyday working areas. My GIAC certs provided a practical framework that is comprehensive and effective. Clients trust my work when they know I'm certified and after when the see the result." - Juan Manzano, GSE

GIAC Certifications FAQ’s

  • Students can add a GIAC Certification exam attempt to their SANS course purchase either during the registration process, or through their SANS Account dashboard up until thirty days after the completion of their in-person, Simulcast, or Live Online course. For OnDemand orders, students have until ninety days after the registration date to add the GIAC Certification exam attempt bundle.

    The deadline to complete the GIAC Certification exam attempt is four months from the completion of the in-person, Simulcast, or Live Online course. For OnDemand orders, the deadline to complete the GIAC Certification exam attempt is the same as the online training deadline.

    To add a GIAC Certification exam attempt bundle after registering:

    1. Log in to your SANS Account and click the "My Orders" link in your dashboard
    2. Select "Add Available Bundled Items to Your Order" and submit your payment information to complete your purchase

  • For OnDemand orders, you will receive access to the training and exam when you manually start the course from your account, or automatically within 14 days of payment. For in-person or LiveOnline training, you will receive access to the exam 7-10 days after the conclusion of your training event.

  • The option to add the GIAC exam is available when you register for the associated SANS training course. Check out the list of SANS courses to get started.

More FAQ's