GIAC GASF 認定試験の出題範囲:
| トピック | 出題範囲 |
|---|
| トピック 1 | - Mobile Malware and Spyware Detection and Analysis: This section of the exam measures skills of digital evidence examiners and covers how malicious software interacts with Android and iOS operating systems. It involves identifying, detecting, and analyzing malware and spyware behavior using specialized forensic tools to uncover unauthorized access or malicious activity.
|
| トピック 2 | - iOS Device Forensics and Analysis of File System, Evidence Locations and User Activity: This section of the exam measures skills of mobile forensics analysts and covers the collection, preservation, and examination of data from iOS devices. It includes understanding iOS file system architecture, user interaction traces, and key artifact locations that reveal evidence of device usage and activity.
|
| トピック 3 | - Third-party Application Artifact Analysis: This section of the exam measures skills of mobile forensics analysts and covers the tools and techniques used to investigate data produced by third-party applications. It includes examining logs, chat histories, cached data, and other records that provide insights into user behavior and potential evidence.
|
| トピック 4 | - Android Backup and Cloud Storage Forensics: This section of the exam measures skills of digital evidence examiners and covers the methodologies and platform-specific processes used by Android devices to create and manage backups. It includes understanding how system and user data are stored in the cloud and how such data can be retrieved and analyzed for forensic purposes.
|
| トピック 5 | - iOS Backup and Cloud Storage Forensics: This section of the exam measures skills of digital evidence examiners and covers the methods used by iOS devices to create system and data backups. It focuses on understanding Apple’s platform-specific storage mechanisms, including iCloud, and how these resources can be examined to recover relevant forensic artifacts.
|
| トピック 6 | - Mobile Forensics Introduction: This section of the exam measures skills of mobile forensics analysts and covers the foundational techniques and tools used to collect, preserve, and analyze data from Android and iOS mobile devices. It emphasizes understanding how mobile operating systems store and manage information relevant to forensic investigations.
|
参照:https://www.giac.org/certification/advanced-smartphone-forensics-gasf
GIAC GASF 試験概要: