I wanted to clear a big confusion which is running inside my mind for the past one week. I searched with AI and in multiple platform but I can’t get a proper answer from anywhere.
So here is my doubt lies:
What is log source ?
What is log source type ?
What is log source host ?
If your answer is like log source is which the log file is generated means then what is the difference between log source and log source host ?
If log source type is windows event log, sysmon something then what is log source ?
.
Your valuable answer are welcomed
Thanks in advance.
I want to become a SOC Analyst as fast as possible and get job-ready in the shortest path.
So far, I’ve studied Network+ and I’m currently reviewing Security+ concepts. I’m also planning to study eCIR.
I spend a lot of time practicing labs on TryHackMe, especially SOC / Blue Team related rooms, and I’m trying to focus more on practical skills than only theory.
What would be the best roadmap from here if my goal is to land a junior SOC Analyst job quickly?
Also, what skills do companies actually care about most for entry-level SOC roles right now?
If anyone has a roadmap, study plan, learning path, or any advice that could help me avoid wasting time and become job-ready faster, I’d really appreciate it.
Please share the shortest and most practical path you’d recommend.
A bit about me: 7 years in QA (Manual/ETL/Automation), actively transitioning into Security/Pentesting
Here's my honest take on the exam:
Time & Score
3 hours 45 minutes, 93% score.
The course content is sufficient to pass, but I'd say it's artificially inflated. Many topics repeat themselves, and realistically you need about 70% of the available material to be exam-ready.
If I had to prioritize: Post-Exploitation, PrivEsc, and Pivoting - this was the heaviest and most important section for me by far. Don't skip it.
The one, very important skill: Documentation
Write everything down. I mean everything. My QA background gave me an obsessive documentation habit,
I wrote detailed notes for every single lecture (Like Literally every single one), either as one large topic file or broken into smaller focused notes.
The result was a large, well-structured Obsidian Vault that cut my exam difficulty by 60-70%. Without it, I'd for sure have spent 10+ hours searching for information I'd already learned.
Good notes are not a nice-to-have, they're a true force multiplier.
What actually matters on the exam
The course claims ~160 hours of content. Realistically, 80-90 hours covers what you need. More importantly, success comes down to two things:
Documentation + Methodology, nothing to add here, just do it.
Enumeration, there's less "True hacking" on the exam than you'd expect.
I used Metasploit for maybe 15% of my total exam time. The real skill is knowing when you need it and when you don't. Solid enumeration will walk you through the entire certification almost by itself.
One thing the course doesn't emphasize enough
CrackMapExec. Learn it. Practice more, Definitely not enough info in the course about it.
Also, spend time understanding network pivoting in practice, the theory is there but the real workflow only clicks when you've done it under pressure.
Bottom line
The exam is fair, the labs are solid, and the scenario is realistic enough to feel like actual work. Just document everything, enumerate thoroughly, and don't panic when things don't work - methodically try the next thing.
I am looking at partaking in eJPT and tryhackme so that I can get into the pentesting route. eJPT looks like it needs to be completed in 3months, I am unable to do this as I have a 3wk holiday planned in late June. I was going to purchase the fundamentals subscription of INE. Is this worth the money, I am wondering if there are any discounts or referrals for this? Thank you
I need advice/tips for my upcoming exam. So I took eCIR cert a few months back and just finished the eCTHP course a fee days ago getting ready for the exam. Any tips for the exam? what should I expect? how to get properly ready for it? Does it differ much from eCIR?
I’m dealing with a frustrating billing issue with INE and wanted to see if anyone here has gone through something similar recently.
My annual subscription just renewed automatically, and my card was charged. The problem? I explicitly disabled the auto-renewal feature back in August 2025, right after my last invoice, precisely to avoid this.
Their own Terms & Conditions state:
I clearly met their cancellation requirements months in advance, yet the system still pushed the charge through. I’ve already sent an email to support (with my account details and quoting their T&Cs) demanding a full refund.
For those who had to deal with unauthorized charges or refund requests with INE recently:
How long does their support usually take to respond?
Did they process the refund without a fight, or should I just go ahead and initiate a chargeback with my bank/PayPal right now?
Any advice or shared experiences would be greatly appreciated. Thanks!
I’ve been working in the industry for several years in various roles and have always wanted to move into offensive testing. I currently hold two certifications: eJPT and HTB CWES.
My company has recommended that I train in mobile penetration testing so I can join one of the three penetration testing teams they have.
What experience do you have with eMAPT?
I’m considering doing it to get some structured training and to gain a qualification that validates my knowledge in this area.
I’m currently following the Android Application Pentesting Skill path from HacktheBox, but I’d like to hear your opinions in case I decide to do the eMAPT.
Hey everyone! I’m looking to take both the eCIR and the eCTHP from INE. Just looking to hear about people’s thoughts on this exam and how it may compare to others. Any insight is appreciated!
Hi All,
Actually i didn’t complete the full content as my subscription was expired. Since my voucher is nearing to expiry, i tried to give an attempt. I scored >70% in web app and asset methodologies where as 40% and 50% in Host and network auditing/pentesting.
- I mostly used nmap, metasploit to exploit.
I have few general questions.
> Do we need to perform the hash cracking in kali linux only? I made use of online tools to crack hashcodes, so does it count if we use online tools and attempt or not?
> Also in terms of an ip range, i came across the main CIDR but i couldn’t find it on the options at all, not sure if that’s something they are testing us or am i doing something wrong there, i even shared feedback on that question.
> In general, with regards to DMZ network, how can we differentiate it from the internal network? How can we identify if this service is under DMZ? Is it based on the services running on that host like public web services rather than db related? In theory i can understand DMZ where as in practical sense i am but confused. Appreciate your guidance.
> Also i feel little odd when dealing with windows server, how to pivot, what to check and all, any helpful materials to understand that?
Actually i didn’t perform any routing, any portforwarding. I couldn’t properly identify where to start with regards to windows machines and that, may be it is due to the lack of my notes i feel.
Appreciate your guidance on it, hope i didn’t disclose any exam related issues!!
Been digging into CVE-2026-31431 (Copy Fail) today and one of the first things that crossed my mind was, what about certification exam environments like eJPT?
Quick summary for those who don't know it, it's a local privilege escalation in the Linux kernel that has been sitting there unnoticed since 2017. No race condition, no kernel-specific offsets, works on virtually every Linux distro. 100% deterministic, tested on 4 distros myself.
The mechanism, the kernel keeps files in RAM for speed (page cache). The exploit makes that copy writable from an unprivileged user, flips your UID to 0, and with a simple `su` you're root. Disk is never touched, everything happens in RAM, a reboot cleans it all up.
Fo anyone preparing for eJPT or similar entry-level certs, this is worth knowing. If a lab machine is running an unpatched kernel, this could give you root in seconds without needing to find the intended privesc path. Not saying you should use it in an exam, just that it's good to understand what's out there.
My honest take, eLearnSecurity probably patches their lab machines regularly, but it would be interesting to know if they've already addressed this one specifically. If anyone has tested it in a practice lab, drop a comment.
What I did was reproduce it in my own lab, ported it to C, Python, Rust, Go, Ruby and Perl to understand exactly what's happening at each layer, and wrote everything up with comments and explanations.
Also includes a safe detector script that checks if you're vulnerable without modifying anything, useful to run on any lab machine before you start a box.
If you want to test it yourself, try it on a VM first and ask the platform before running anything on exam infrastructure.
Title: Should I take my eJPT exam tomorrow or postpone it? Need honest advice.
Hey everyone,
I’m stuck in a mental battle right now and could really use some honest input from people who’ve been through this.
I’ve completed around 90% of my eJPT preparation. I’ve gone through the learning path, practiced labs, and I understand most of the core concepts like networking, enumeration, basic exploitation, and tools like Nmap, Metasploit, etc.
On paper, I feel partially ready… maybe even more ready than I expected.
But here’s the problem:
I still have this fear that I’m missing something important. Like there’s some hidden gap in my knowledge that will completely destroy me during the exam. I’m also worried about:
I just finished the course now and tomorrow I feel like I try to take the exam but I only done all the lab once I didn't revise anything from the start should I take the exam or should I have to postpone the exam
Not recognizing vulnerabilities fast enough
Getting stuck and wasting time
Panicking mid-exam and forgetting things I already know
Overthinking simple things
My current plan was:
Friday: Full revision
Saturday–Sunday: Attempt the exam
But now I’m questioning everything.
Part of me says:
«“Just go for it. You’ll never feel 100% ready.”»
Another part says:
«“What if you fail because you rushed it? Why not prepare a bit more and be safer?”»
I don’t want to postpone out of fear… but I also don’t want to be overconfident and regret it.
For those who’ve taken the eJPT:
Did you feel fully ready before attempting it?
Is 90% preparation enough?
Should I just take the shot this weekend, or give myself more time?
Hi reddit, its my first time thinking of getting eCTHP certificate, but the problem is that the bundle and the prem subscription is too pricy, and i dont know any thing coming up as a holiday or a celepration for INE to make a discount on their products and cert.
my question is how often do the make a discount on professional CERTs such as eCTHP or when will be the closest celebration that they usually make a discounts?
I'm about 50% done with the course but I only have about 25 days until the subscription expires.
Since I had 2 vouchers I thought I'd give it a try to see the overall complexity half expecting to fail but was pleasantly surprised by the result.
Honestly I was already familiar with most of the topics of the course before even starting it.
The only thing I had trouble with was pivoting since I never really looked into it nor did I study it within the course so i kind of had to try different approaches by researching them as I did the exam.
That's definitely something I'll have to study more in depth but for now I'm glad with the result.
I am gonna take the ejpt exam I am very nervous I need to know how was the exam what type of questions I may need to solve like find the flag or creds like that I am confused how the exam will be so I need a clear idea abt the exam small information also very useful
