🔥 Trending Certification · 2025

GIAC Certified Detection Analyst (GCDA)

Validate your expertise in detecting cyber threats using network traffic analysis, log analysis, and security monitoring. GCDA-certified professionals demonstrate mastery of detection engineering, threat hunting, and SIEM-based analysis to identify adversary activity across enterprise environments.

Threat Detection Network Traffic Analysis Log Analysis SIEM Threat Hunting Industry Recognised Career Defining

Enroll Now

Network Traffic AnalysisPacket capture & protocol inspection

Log Analysis & SIEMCorrelation rules & alert triage

Threat HuntingProactive adversary detection

Detection EngineeringRule development & tuning

Exam Questions

3 hrs

Duration

65%

Passing Score

GIAC

Certified

Why It's Trending

Detection Expertise Is the Frontline of Cyber Defence

As adversaries grow more sophisticated, organisations need skilled detection analysts who can identify threats in real time — before damage is done.

Trending

71%

Of Breaches Undetected for Weeks

The average dwell time for attackers remains dangerously high — skilled detection analysts are essential to close this gap.

14,000+

Open SOC Analyst Positions

Security operations centres worldwide face a chronic shortage of skilled detection analysts.

Trending

SOC-Ready

Detection-Focused Certification

GCDA is one of very few certifications specifically targeting detection skills — not just tools.

+34%

Salary Premium for Detection Analysts

Threat detection and hunting specialists command significant salary premiums in security operations.

Course Content

Complete GCDA Curriculum

Click any module to expand and explore the topics covered in detail.

Network Traffic Analysis

5 Topics

Packet capture techniques and tools (Wireshark, tcpdump)

TCP/IP protocol analysis for threat detection

DNS, HTTP, and encrypted traffic analysis

Detecting command-and-control (C2) communications

Network baseline and anomaly detection

Log Analysis & SIEM

5 Topics

Windows event log analysis for threat detection

Linux and syslog analysis techniques

SIEM architecture, correlation rules, and tuning

Alert triage and investigation workflows

Log aggregation and normalisation strategies

Threat Intelligence & Detection Engineering

5 Topics

Introduction to cyber threat intelligence (CTI)

Indicator of Compromise (IoC) management

MITRE ATT&CK framework for detection mapping

Detection rule development (Sigma, Yara, Snort)

Measuring and improving detection coverage

Threat Hunting

5 Topics

Threat hunting methodology and hypothesis development

Hunt techniques: stack counting, clustering, and frequency analysis

Hunting for lateral movement and privilege escalation

Memory forensics for threat hunting

Operationalising hunt findings as detection rules

Endpoint & Cloud Detection

5 Topics

Endpoint Detection and Response (EDR) analysis

Cloud log analysis: AWS CloudTrail, Azure Monitor

Container and serverless environment detection

Detecting identity-based attacks and credential theft

Incident scoping from detection signals

Who Is This For

Designed for SOC & Detection Professionals

GCDA is purpose-built for practitioners who detect, hunt, and respond to threats across network, endpoint, and cloud environments.

SOC Analysts

Threat Hunters

Security Analysts

Detection Engineers

Incident Responders

Network Security Engineers

FAQs

Frequently Asked Questions

What is the GIAC Certified Detection Analyst (GCDA) certification?

GCDA validates expertise in detecting cyber threats through network traffic analysis, log analysis, SIEM-based monitoring, threat hunting, and detection engineering across enterprise environments.

What are the GCDA exam requirements?

The GCDA exam consists of 82 questions, is web-based and proctored, has a 3-hour time limit, and requires a minimum passing score of 65%. Proctoring is available via ProctorU (remote) or PearsonVUE (onsite).

What detection tools and technologies does GCDA cover?

GCDA covers network analysis tools (Wireshark, tcpdump), SIEM platforms, EDR solutions, threat intelligence platforms, and detection rule languages including Sigma, Yara, and Snort/Suricata rules.

Who should pursue the GCDA certification?

GCDA is ideal for SOC analysts, threat hunters, security analysts, detection engineers, incident responders, and network security engineers who need to sharpen detection skills across network, endpoint, and cloud environments.

How does GCDA relate to the MITRE ATT&CK framework?

GCDA teaches professionals to map detection rules and hunting hypotheses directly to MITRE ATT&CK techniques — enabling systematic coverage measurement and gap analysis for detection programmes.

Is GCDA focused on tools or on methodology?

GCDA emphasises methodology over any single tool — you learn detection principles applicable across different SIEM platforms, EDR vendors, and environments, making you adaptable in any SOC or IR team.

Get Started

Build Elite Detection Skills with GCDA

Join Zetlan Technologies' GCDA programme and develop the skills to detect advanced threats across network, endpoint, and cloud environments. Earn your GIAC certification and become the analyst every SOC needs.

Enroll Now Call Us WhatsApp

GIAC Certified Detection Analyst (GCDA)

Detection Expertise Is the Frontline of Cyber Defence

GCDA Exam Details

Complete GCDA Curriculum

Designed for SOC & Detection Professionals

Frequently Asked Questions

Build Elite Detection Skills with GCDA