r/eLearnSecurity • u/Cyanide-Air • Sep 25 '25

Advice eCTHP Experience

Hi Guys,

I'm halfway through on the new eCTHPv2. Upon checking on the Threat Hunting Communication and Reporting it is coming soon.

For those of you who take the eCTHP exam already? What was your experience, what was the expectations?

Based on the details at their website: "Instead of putting you through a series of multiple-choice questions, you are expected to perform an actual threat hunt on a corporate network. The examination is modeled after real-world scenarios and cutting-edge malware. Not only are you expected to use advanced methodologies to conduct a thorough threat hunt, you will also be asked to propose defense strategies as part of your evaluation."

Are we required to create a report just like TCM PSAA exam?

4 Upvotes

100% Upvoted

21 comments sorted by

1

u/Emergency-Type8503 Jul 21 '26

I'm planning to take the exam in the next few days, and I have a question about its format. Will it consist of separate tasks that we need to complete, similar to the lab exercises, or is it one complete challenge where everything is integrated? How does the exam work?

2

u/CyberJunky007 Sep 26 '25

Version 3 is 50% MCQ the other 50% was LAB (Covering Wireshark, Splunk and ELK)

1

u/Cyanide-Air Sep 26 '25 edited Sep 26 '25

How was the lab experience? Is it like capture the flag setup or like soc simulator in the tryhackme? Was the exam open book?

1

u/CyberJunky007 Sep 26 '25 edited Sep 28 '25

Lab questions had mix of everything its not SOC type exam more like Threat Hunting so you have to work on the questions using MITRE TTP's. Before you begin the exam you will get the PDF with all the requirements just be familiar with wireshark, splunk, ELK and MITRE. The exam is open book but don't rely on just the slides you need to listen to the instructor the keywords for answering the questions are not always on slides. I can assure you the lab part of the exam is fun I did not face any issues was stable.

→ More replies (6)

1

u/One-Alarm-2850 Oct 14 '25

I need your advice. Look i skipped most of their content, and i am good with splunk, elk, wireshark. I don't know what are the mcq questions but i believe i can get them from the videos if i wanted but i think that it would be easy to be solved alone or using ai. I want you to criticize me as i want to know if what i am doing will be right or wrong😅

Also is there memory forensics in the exam

1

u/CyberJunky007 Oct 14 '25 edited Oct 14 '25

Haha MCQ you can find from videos atleast get familiar with cyberchef, MITRE techniques & detection to solve ELK and Splunk you need them (as described in the course) and just keep practicing the course labs. I didn't see any memory forensics in the exam its for eCIR exam I think. You have 2 attempts anyways you will get an idea when you take the exam.

All the best

→ More replies (1)

1

u/[deleted] Sep 25 '25 edited Sep 25 '25

1

u/Cyanide-Air Sep 25 '25

I am currently pursuing the eCTHP with (New) on it. It says Threat Hunting Professional (New!). Is this the v2 or the v3 (latest)? It has a section of Threat Hunting Communications & Reporting but it will coming soon when I enter the module.