GIAC GASF 시험요강:
| 주제 | 소개 |
|---|
| 주제 1 | - Third-party Application Forensics Introduction: This section of the exam measures skills of digital evidence examiners and covers the artifacts generated by third-party applications on Android and iOS devices. It introduces how apps store, manage, and leave traces of user activity that can be recovered and analyzed in a forensic investigation.
|
| 주제 2 | - iOS Device Forensics and Analysis of File System, Evidence Locations and User Activity: This section of the exam measures skills of mobile forensics analysts and covers the collection, preservation, and examination of data from iOS devices. It includes understanding iOS file system architecture, user interaction traces, and key artifact locations that reveal evidence of device usage and activity.
|
| 주제 3 | - Android Device Forensics and Analysis of File System, Evidence Locations and User Activity: This section of the exam measures skills of mobile forensics analysts and covers the processes involved in collecting, preserving, and examining data from Android devices. It includes identifying evidence locations, analyzing user activity, and understanding the file system structures commonly encountered during forensic investigations.
|
| 주제 4 | - iOS Backup and Cloud Storage Forensics: This section of the exam measures skills of digital evidence examiners and covers the methods used by iOS devices to create system and data backups. It focuses on understanding Apple’s platform-specific storage mechanisms, including iCloud, and how these resources can be examined to recover relevant forensic artifacts.
|
| 주제 5 | - Android Backup and Cloud Storage Forensics: This section of the exam measures skills of digital evidence examiners and covers the methodologies and platform-specific processes used by Android devices to create and manage backups. It includes understanding how system and user data are stored in the cloud and how such data can be retrieved and analyzed for forensic purposes.
|
참조: https://www.giac.org/certification/advanced-smartphone-forensics-gasf
GIAC GASF 시험 개요:
| 인증 벤더: | Global Information Assurance Certification (GIAC) |
| 시험명: | GIAC 고급 스마트폰 포렌식 (GIAC Advanced Smartphone Forensics) |
| 시험 번호: | GASF |
| 관련 자격증: | GIAC Certified Forensic Analyst (GCFA) GIAC iOS and macOS Examiner (GIME) GIAC Battlefield Forensics and Acquisition (GBFA) |
| 합격 점수: | 69% |
| 지원 언어: | English |
| 응시료: | USD 999 (시험 응시) / USD 899 (재시험) / USD 479 (기간 연장) / USD 499 (갱신) (약) |
| 시험 시간: | 120분 |
| 실제 시험 문항 수: | 75 |
| 시험 형식: | 객관식, 온라인 감독 시험 |
| 자격증 유효 기간: | 4년 (CEU 또는 시험을 통해 갱신 가능) |
| 샘플 문제: | GIAC GASF 샘플 문제 |
| 응시 방법: | 원격 감독 또는 현장 시험 파트너를 통한 웹 기반 감독 시험 |
| 전제 조건: | 공식적인 필수 조건 없음 (GIAC는 관련 경력 또는 SANS FOR585 교육 이수를 권장함) |
| 공식 요강 URL: | https://www.giac.org/certifications/advanced-smartphone-forensics-gasf/ |