GIAC · Professional Certification · Professional
GIAC Certified Forensic Analyst (GCFA)
Crydd Score 68
Demand Stable
Career Value High
Recognition High
GCFA at a glance
- Provider
- GIAC
- Credential type
- Professional Certification
- Exam required
- Yes
- Category
- Security
- Level
- Professional
- Cost
- $999 (certification attempt)
- Difficulty
- Advanced
- Time to earn
- 3–4 months
- Validity
- 4 years (renew with 36 CPE credits and a $499 fee)
- Format
- 82 questions, 3 hours, proctored, with CyberLive hands-on questions; 71% to pass
- Prerequisites
- None stated by GIAC
What is GCFA?
GIAC's advanced certification for forensic analysts and incident responders: investigating intrusions on Windows systems and networks, memory and timeline analysis, and hunting for attackers already inside.
Skills it covers
- Digital forensics
- Incident response
- Memory forensics
- Timeline analysis
- Threat hunting
Is GCFA worth it? The Crydd Verdict
CS 68Choose it if
You investigate breaches, or want to move from SOC analysis into incident response and forensics.
Consider alternatives if
You are earlier in incident response: GCIH first. Within a Cisco SOC: CCNP Cybersecurity.
Why we say so
Forensics is a specialist, well-paid area, and GCFA is one of the credentials most associated with it.
Market demand
Incident response and forensics roles sit at consultancies, large enterprises and government; GCFA appears frequently in those postings.
Where GCFA takes you
- Cybersecurity Analyst
- Security Engineer
Career roadmaps show where this certification fits in each path. See the roadmaps.
Related certifications
Curated connections from the catalog — each labelled with how it relates to GCFA, so you know why it’s here.
Careers GCFA leads to
The professional paths this certification genuinely serves — browse every relevant credential for each.
A sensible order
Where GCFA sits on the path — build up, then step on.
Build the foundation first
Earlier steps on the same path
