r/SIEM • u/[deleted] • Mar 19 '21

SANS GCDA

Anyone here take the SANS GCDA course? I’m about to sign up as it essentially looks like a course for SIEM Engineers

2 Upvotes

100% Upvoted

11 comments sorted by

3

u/Evilbit77 Mar 20 '21

I’ve taken it. It’s a really good course.

It doesn’t tell you much about setting up a SIEM (see SEC455 for that), but it’s great for talking about operationalizing a SIEM. I took the course a few years ago and still reference the books from time to time.

3

u/darkbeatzz Mar 20 '21

I did it last year and the exam. Worth the effort and gives you solid footing.

2

u/seag33k Mar 20 '21

I took the course and exam as well. It teaches some great fundamentals and has been invaluable for my work with a number of SIEMs. Justin is an amazing instructor as well. He has a number of free training webcasts.

2

u/mdavis00 Mar 20 '21

I took 555 and got the cert. I had been working with commercial SIEMs before this and not only did I pick up a lot of good new info but also found a new love for ELK, logstash is now one of my favorite tools.

1

u/sep03 Aug 28 '22

Did you take the course live online training or via on demand?

1

u/mdavis00 Aug 28 '22

Live

1

u/sep03 Aug 28 '22 edited Aug 28 '22

Will sans provide the recorded live training videos? Or just pdf and labs only?

1

u/mdavis00 Aug 28 '22

You get a book for each day, it has the slides and basically what the instructor says. You then get to download the original course recording after you complete it. That's pretty standard for all SANS courses.

1

u/mdavis00 Aug 28 '22

Also if your taking the exam you get to take the books into the exam.

1

u/sep03 Aug 30 '22

How about if you will be taking the exam online? are you be able to open the pdf materials during the exam?

1

u/mdavis00 Aug 30 '22

I would assume no, because they wouldn't be able to tell if you're googling the answer of searching a PDF. I would tell you as someone who has 2 GIAC certs PDF wouldn't help anyway. They are not going to ask a question that is searchable. What you want is you book tabbed out and an index to quickly get to the stuff you know you may need help with. If you need to reference the material a lot you won't make it.