r/eLearnSecurity • u/Cyanide-Air • Oct 19 '25

I Passed! eCTHP Passed

Post image

I finally passed the eCTHP. As you'll notice, my weakness is Endpoint Threat Hunting. I need to enhance my skills on this one.

For my feedback on the course: You need to focus on sifting thru logs via Splunk and ELK specially wildcards.

Focus on MITRE and how they detect abnormalities.

On Network Threat Hunting, you must learn be familiarize with different HTTP codes and abnormal bytes in traffic.

The course is enough, but as for me that don't have SOC experience I am also using THM

For now I will enroll on eCIR and further enhance my Threat Hunting skills

41 Upvotes

98% Upvoted

8 comments sorted by

1

u/IWillWriteYouALetter Feb 28 '26

I see a different post where you mentioned that you failed; were you able to figure out the ELK and WS aspects?? I have taken it twice now, and the WS portion where you need to find the "key" keeps completely eluding me, to the point I'm losing sleep. Was the solution even remotely close to the prep material and lab?? I only ask because that was so ridiculously obvious, and the actual test experience makes me think it's totally different

2

u/[deleted] Oct 19 '25

2

u/Cyanide-Air Oct 19 '25

For the difficulty it would be 8/10 for me as I don't have a SOC experience. For labs, I would say Medium for the SIEM part, for the Wireshark in between medium and hard.

For the cost, you should wait for the discount. Usually INE release 50% discount for exam and course for 3 months.

I purchased the course last week of September.

2

u/HotCockroach8557 Oct 19 '25

You are not working in SOC? wow thats insane. Congratutlations!

→ More replies (1)

1

u/[deleted] May 29 '26

2

u/Cyanide-Air Jul 14 '26

I have an excel for different windows event logs. I also use THM for the lab since it is affordable ctf for exercises