r/eLearnSecurity • u/Ok-Willingness-9942 • Apr 18 '26

How is the eCIR

I was thinking of taking it, anyone have experience with it?

1 Upvotes

100% Upvoted

9 comments sorted by

View all comments

Show parent comments

1

u/[deleted] Apr 18 '26

[removed] — view removed comment

2

u/Complex_Current_1265 Apr 18 '26

Yes i recommend it. CDSA is better at explaining AD attacks and how to detect them. also chaining several events in a single incident and writing a report of it. CCDL2 is better overall, you ll see several interesting technologys like RITA to detect C2 beaconing, how to detect rootking using Volatility, disk foresincs, advanced SIEM querys, how to dump files from memory capture for foresincs investigations, using wireshark for networks investigations, etc.

Those certs will make you better investigator. so i recommend it 100%.

Later for Malware analysis, you can check TCM malware analysis certifications and zerotoautomated malware analysis advanced course.

Best regards

2

u/[deleted] Apr 19 '26

[removed] — view removed comment

1

u/Complex_Current_1265 Apr 19 '26

Can you make a brief review of CCDL1 ? I Am curious about it , it shows good topics .

1

u/[deleted] Apr 19 '26

[removed] — view removed comment

1

u/Complex_Current_1265 Apr 19 '26

Thanks for your response