The GIAC Network Forensic Analyst (GNFA) certification validates a practitioner’s ability to perform examinations employing network forensic artifact analysis. GNFA certification holders have demonstrated an understanding of the fundamentals of network forensics, normal and abnormal conditions for common network protocols, processes and tools used to examine device and system logs, and wireless communication and encrypted protocols.
Areas Covered
- Network architecture, network protocols, and network protocol reverse engineering
- Encryption and encoding, NetFlow analysis and attack visualization, security event & incident logging
- Network analysis tools and usage, wireless network analysis, & open source network security proxies
Who is GNFA for?
- Anyone interested in computer network intrusions and investigations who has a solid background in computer forensics, information systems, and information security
- Incident response team members
- Forensicators
- Threat hunters
- Law enforcement officers, federal agents, and detectives
- SOC personnel
- information security practitioners and managers
- Network defenders and engineers
- Information technology professionals
