GCFE — GIAC Certified Forensic Examiner
GIAC's Windows forensic examination credential and the usual first GIAC certification in a forensics career, paired with the six-day SANS FOR500 Windows Forensic Analysis course.
Type: CertificationWorking practitionersLaw enforcement & investigatorsCareer changers
Offered by GIAC (Global Information Assurance Certification)
The facts
- Cost
- $999 for the certification attempt on its own ($899 for a retake). The paired SANS FOR500 course is listed separately at $8,780.Figure read 2026-09-12 from www.giac.org/pricing
- Prerequisites
- None published. GIAC describes the audience as anyone with a background in information systems, information security and computers.
- Format
- One proctored exam, remote or at a test centre. 82 questions, 3 hours, 70% to pass. GIAC's GCFE page does not describe this exam as using the CyberLive performance format.
- Length
- Exam only. The paired FOR500 course is six days instructor-led or about 36 hours self-paced, with four months of OnDemand access.
- Renewal
- Four-year cycle. 36 CPE credits plus a $499 renewal fee; additional renewals within two years of a full-price renewal are $249.
- Accreditation
- GIAC states it is an active accredited ISO/IEC 17024 personnel certification body through ANAB. The GCFE page also displays DoD 8140, DORA and NIS2 alignment.
- Who it suits
- Someone entering digital forensics who wants one recognised, accredited credential and works mostly on Windows endpoints.
- Audience
- Working practitioners · Law enforcement & investigators · Career changers
Strengths
- Windows artefact analysis is the bread and butter of almost all civil and criminal digital forensics, and this is the best-known credential aimed squarely at it.
- Lower conceptual barrier than GCFA, so it works as a genuine first certification rather than a stretch goal.
- Same ANAB/ISO 17024 accreditation as the rest of the GIAC family.
- FOR500's artefact coverage is detailed enough to be useful as a reference long after the exam.
Limitations
- Same cost problem as every GIAC certification: about $9,800 at list price with the course, and $999 even if you self-study and sit the exam alone.
- Scoped to Windows. A mobile-heavy or macOS-heavy caseload gets comparatively little from it.
- GIAC does not publish, on the GCFE page, whether the exam permits reference material, so plan on verifying current exam conditions directly rather than relying on the widely repeated claim that GIAC exams are open-book.
- Recurring $499 renewal every four years.
Sources
Costs, prerequisites and exam formats in this field change often, and several providers price by region, cohort or employer agreement. Every figure on this page carries the date it was read and a link to the page it was read from. Confirm current terms with the provider before you spend anything.