Blockchain forensic tools — which ones does the CCA exam cover?

I'll add — the forensic section also covers chain-of-custody documentation and how to present blockchain evidence in a legal or regulatory context. That part tripped me up in practice because I was focused on technical tracing and skipped the report-writing/evidence standards material. Don't make the same mistake.

Confirmed — the exam is tool-agnostic. You need to understand concepts like UTXO tracing, address reuse heuristics, mixer detection, and cross-chain bridge analysis at a conceptual level. No vendor UI questions. If you know how the underlying crypto audit methodology works, the tool questions will make sense regardless of which platform you actually use day-to-day.

From what I've seen, the CCA doesn't go deep on tool-specific UI mechanics — you're not going to get a question asking where to find a specific filter in Reactor's interface. What it does test is conceptual differentiation: knowing that Chainalysis and TRM Labs are generally positioned around compliance and law enforcement workflows, while Elliptic and CipherTrace (now folded into Mastercard) have historically leaned more toward financial institution risk monitoring. The exam wants you to understand why an investigator would choose one approach over another, not whether you can click through a menu.

The tip that actually helped me: go through each tool and write a one-sentence "best fit" summary — like, "TRM is strong for real-time sanctions screening at exchanges" or "Reactor excels for tracing multi-hop flows in criminal investigations." When I stopped trying to memorize feature lists and started thinking in terms of use-case fit, the practice questions started clicking. The exam loves scenario-based items where you're given an investigation context and have to pick the appropriate methodology or tooling category.

Also worth knowing: CipherTrace's acquisition means some study materials are outdated on how it's positioned now, so don't over-invest in memorizing its standalone feature set. Focus your energy on understanding heuristics-based clustering, UTXO analysis fundamentals, and the difference between attribution versus identification — those concepts thread through all the tools and show up consistently.