GIAC GASF 시험요강:
| 주제 | 소개 |
|---|
| 주제 1 | - Android Backup and Cloud Storage Forensics: This section of the exam measures skills of digital evidence examiners and covers the methodologies and platform-specific processes used by Android devices to create and manage backups. It includes understanding how system and user data are stored in the cloud and how such data can be retrieved and analyzed for forensic purposes.
|
| 주제 2 | - iOS Device Forensics and Analysis of File System, Evidence Locations and User Activity: This section of the exam measures skills of mobile forensics analysts and covers the collection, preservation, and examination of data from iOS devices. It includes understanding iOS file system architecture, user interaction traces, and key artifact locations that reveal evidence of device usage and activity.
|
| 주제 3 | - Third-party Application Forensics Introduction: This section of the exam measures skills of digital evidence examiners and covers the artifacts generated by third-party applications on Android and iOS devices. It introduces how apps store, manage, and leave traces of user activity that can be recovered and analyzed in a forensic investigation.
|
| 주제 4 | - iOS Backup and Cloud Storage Forensics: This section of the exam measures skills of digital evidence examiners and covers the methods used by iOS devices to create system and data backups. It focuses on understanding Apple’s platform-specific storage mechanisms, including iCloud, and how these resources can be examined to recover relevant forensic artifacts.
|
| 주제 5 | - Mobile Malware and Spyware Detection and Analysis: This section of the exam measures skills of digital evidence examiners and covers how malicious software interacts with Android and iOS operating systems. It involves identifying, detecting, and analyzing malware and spyware behavior using specialized forensic tools to uncover unauthorized access or malicious activity.
|
| 주제 6 | - Android Device Forensics and Analysis of File System, Evidence Locations and User Activity: This section of the exam measures skills of mobile forensics analysts and covers the processes involved in collecting, preserving, and examining data from Android devices. It includes identifying evidence locations, analyzing user activity, and understanding the file system structures commonly encountered during forensic investigations.
|
| 주제 7 | - Third-party Application Artifact Analysis: This section of the exam measures skills of mobile forensics analysts and covers the tools and techniques used to investigate data produced by third-party applications. It includes examining logs, chat histories, cached data, and other records that provide insights into user behavior and potential evidence.
|
참조: https://www.giac.org/certification/advanced-smartphone-forensics-gasf
GIAC GASF 시험 개요:
| 인증 벤더: | Global Information Assurance Certification (GIAC) |
| 시험명: | GIAC 고급 스마트폰 포렌식 (GIAC Advanced Smartphone Forensics) |
| 시험 번호: | GASF |
| 지원 언어: | English |
| 자격증 유효 기간: | 4년 (CEU 또는 시험을 통해 갱신 가능) |
| 응시료: | USD 999 (시험 응시) / USD 899 (재시험) / USD 479 (기간 연장) / USD 499 (갱신) (약) |
| 합격 점수: | 69% |
| 관련 자격증: | GIAC Certified Forensic Analyst (GCFA) GIAC Battlefield Forensics and Acquisition (GBFA) GIAC iOS and macOS Examiner (GIME) |
| 실제 시험 문항 수: | 75 |
| 시험 시간: | 120분 |
| 시험 형식: | 온라인 감독 시험, 객관식 |
| 샘플 문제: | GIAC GASF 샘플 문제 |
| 응시 방법: | 원격 감독 또는 현장 시험 파트너를 통한 웹 기반 감독 시험 |
| 전제 조건: | 공식적인 필수 조건 없음 (GIAC는 관련 경력 또는 SANS FOR585 교육 이수를 권장함) |
| 공식 요강 URL: | https://www.giac.org/certifications/advanced-smartphone-forensics-gasf/ |