Mediocre1Just took it this week and passed. It was by far the hardest GIAC exam I've taken, not because of the depth of knowledge needed more so the breadth. The...Just took it this week and passed. It was by far the hardest GIAC exam I've taken, not because of the depth of knowledge needed more so the breadth. The index hopefully given to you through the course is a good start, build on it. Know Windows time rules and NTFS structures thoroughly. Also, for any of the tools referenced in the books (fls, mactime, Sleuth kit) make a cheatsheet of tool outputs if you aren't intimately familiar with them.Show more1 month ago
mustuI passed it on 31st Dec and agree with Mediocre1 that it's one of the hardest GIAC exams because there is so diverse much content in the course. You...I passed it on 31st Dec and agree with Mediocre1 that it's one of the hardest GIAC exams because there is so diverse much content in the course. You don't need to be expert in each topic but must not skip any part. A thorough index definitely helps.Show more1 month ago