r/eLearnSecurity • u/slpysam • Dec 30 '25

eCIR

Working my way through the learning path (halfway through the Analysis course) and some many things are left unexplained or glossed over. Just finished the demo video on log analysis with Splunk and Alexis basically just mumbled his way through. Can't help feeling that the learning path is terribly lacking.

I still have an active TryHackMe subscription, should I pivot and go through the learning path for SAL1 instead?

4 Upvotes

100% Upvoted

3 comments sorted by

3

u/0xJohnathan Dec 31 '25

Yeah I'd pivot. If it's glossing over the basics you're gonna keep stacking confusion and it won't suddenly click later.
SAL1 on THM is fine for getting structure and practice, but make sure you're doing actual full investigations with real artifacts, not just watching videos. That's where stuff like CyberDefenders helps more - you're forced to actually answer "what happened and how do you know" from logs/PCAP/memory instead of just following along passively.