GIAC (SANS)GIAC Offensive AI Analyst
The GIAC Offensive AI Analyst (GOAA) certification validates your ability to apply practical, real-world offensive artificial intelligence techniques to modern cybersecurity challenges. It is designed for SOC analysts, red teamers, and security professionals who need to emulate sophisticated adversaries using AI-driven tactics like deepfake-enabled phishing, automated vulnerability discovery, and AI-powered attack simulations. Earning GOAA proves you can close the gap between AI-enhanced attackers and traditional defenders.
383 practice questions · Updated 2026-07-30
GOAA Curriculum
Every domain, objective, and concept the GOAA exam measures.
- Define AI
- Identify AI subfields
- Explain machine learning basics
- Explain deep learning basics
- Recognize AI applications
- Understand AI limitations
- AI-Powered Phishing Email Generation
- Crafting Effective Phishing Prompts
- Detecting AI-Generated Phishing Emails
- Ethical and Legal Considerations
- OSINT Fundamentals
- AI-Powered Data Collection
- Entity Extraction and Correlation
- Sentiment and Behavioral Analysis
- Pattern Recognition and Anomaly Detection
- Automated Reporting and Visualization
- Ethical and Legal Considerations
- Network Scanning Fundamentals
- Port Scanning Techniques
- Service and Version Detection
- Vulnerability Scanning Basics
- AI-Enhanced Scanning
- Interpreting Scan Results
- AI-assisted vulnerability discovery
- AI-driven payload generation
- Automated exploitation workflows
- Evasion of detection mechanisms
- Analysis of AI-generated attack results
- Adversarial Input Generation
- Model Evasion Techniques
- Defensive Control Bypass Strategies
- Red-Teaming AI Defenses
- Countermeasure Evaluation
- Malware Types
- Malware Lifecycle
- Malware Delivery Mechanisms
- Malware Persistence Techniques
- Malware Evasion Techniques
- Malware Analysis Basics
- AI-Driven Malware Generation
- Adversarial Machine Learning in Malware
- Deepfake Creation Techniques
- Deepfake Detection Methods
- Ethical and Legal Implications
- Deepfake Fundamentals
- Audio Deepfake Generation
- Image Deepfake Generation
- Video Deepfake Generation
- Deepfake Detection Techniques
- Ethical and Legal Implications
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for GOAA, so none is invented.
Social Engineering Fundamentals
5 concepts · 44 questions