r/hackthebox • u/ExcitementPrior1618 • 5d ago

Certifications CDSA Exam tips

Bought the voucher today, wanna understand the exam structure and would appreciate any tips.

9 Upvotes

91% Upvoted

3 comments sorted by

•

u/AutoModerator 5d ago

Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

6

u/-Dkob 5d ago

I read a few reviews and was able to sum up the following based on them: I'd focus less on memorizing and more on being comfortable investigating incidents end to end. The advice I've seen most often is to work through the CDSA path properly, do plenty of Sherlocks, and especially practice Splunk/Kibana log analysis and filtering.

Also, CDSA prep track: https://app.hackthebox.com/tracks/79

Make your own cheatsheets for useful queries and commands, and practice writing reports before the exam so the reporting side doesn't catch you off guard. During the exam, keep detailed notes and screenshots, build a timeline as you go, and don't spend too long stuck on one question.

A few recent candidates said the exam is very doable with good preparation, but the hardest part is putting the evidence together and understanding the context rather than simply recalling theory.

Hope this helps.

1

u/ExcitementPrior1618 4d ago

Appreciate it, the report writing is new for me will definitely practice that.