Skills
- Threat Detection & Investigation, Phishing Analysis, Web Attack Investigation, Network Security Monitoring, Incident Response
Cyberwarfare Labs
Certified Cyber Defence Analyst (CCDA) Certificate is earned by mastering cyber defence fundamentals, phishing investigation, web attack analysis, network intrusion investigation, host-based attack detection, incident response methodologies, and defensive security operations demonstrated through hands-on exercises in a Blue Team investigation lab, and by successfully passing the CCDA examination.
Capabilities
The holder of an active CCDA Certificate possesses the capability to:
- Perform threat detection and investigate phishing, web-based, network-based, and host-based cyber attacks using structured investigative methodologies.
- Analyze malicious emails, URLs, headers, macros, and suspicious files to identify phishing campaigns and attack indicators.
- Investigate web application attacks including injection, file inclusion, automated attacks, and other common web intrusion techniques.
- Detect and analyze network-based attacks using network monitoring, incident response workflows, and analytical investigation techniques.
- Investigate host-based compromises by analyzing endpoint activity, EDR/XDR telemetry, and incident response artifacts.
- Utilize defensive technologies including SIEM, network monitoring, incident response platforms, and security analytics to identify and respond to cyber threats.
- Assess organizational cyber defence capabilities by applying investigative methodologies and defensive best practices across enterprise environments.
Next Steps
This certification is suited for roles such as:
- SOC Analyst
- Incident Responder
- Detection Engineer
- Threat Hunter
Learners can advance with the following certifications:
-
Certified Blue Team Fundamentals (BTF) Course → Advanced-level course focusing on foundational Blue Team operations, defensive monitoring, and incident response.
-
Certified Multi Cloud Blue Team Analyst (MCBTA) Course → Advanced-level course focusing on enterprise Blue Team operations, detection engineering, and security monitoring.
-
Certified Azure Threat Hunter (CAz-TH) Course → Advanced-level course focusing on threat hunting, incident investigation, and detection techniques in Microsoft Azure environments.
Earning Criteria
To earn the CCDA certificate, students are required to:
- Complete Study Materials via CRP Portal.
- Deploy Local Lab (following detailed instructions).
- Schedule CCDA practical exam via CRP Portal.
- Pass & earn CWL Verified Certificate.
Connecting You to Advanced Cybersecurity Expertise Worldwide.
Get in touch
Cambridge, United Kingdom, CB2 9SU.