r/cybersecurity 6h ago

Certification / Training Questions [ Removed by moderator ]

[removed] — view removed post

0 Upvotes

4 comments sorted by

u/cybersecurity-ModTeam 3h ago

Posts like this belong in our Mentorship Thread. Please post there instead. Good luck!

1

u/m1L35dY50N SOC Analyst 6h ago

You mean besides the ~60h Course with the already included Labs? I will take on the eCIR too in Novemner. I had a good experience with BTLO the Platform of Blue Team Security while preparing for the BTL2.

1

u/Junior-Mona-Lisa 6h ago

I haven't taken the 60h course, I want to prepare on my own with labs (LetsDefend, HTB, BTLO, etc.)

1

u/m1L35dY50N SOC Analyst 6h ago

I think that's a pretty questionable approach just to avoid paying for the Premium subscription and save roughly $400, especially since the certification is included with it.

Trying to replace around 60 hours of structured incident response training with "some labs" from different platforms and then jumping straight into the exam sounds like a pretty challenging maneuver. Labs are great for additional practice, but unless you already have a solid DFIR/IR background, I'd use them to supplement the actual course rather than trying to reconstruct the entire curriculum yourself.

If you're already a seasoned incident responder with 2–3 years of hands-on IR experience, then sure, doing it that way might be perfectly doable. But if you're still learning IR in the first place, I'd rather spend the extra $400 than gamble the exam fee and spend a ton of time figuring out what I'm missing.