|
Title: Sans GCIA Post by: Dark_Knight on July 09, 2010, 09:06:09 PM So having just recently completed the GWAPT, I now have my sights set on the GCIA. :)
Any thoughts? Title: Re: Sans GCIA Post by: ajohnson on July 09, 2010, 09:56:13 PM What's there to think about? DO IT! ;D
Congrats on the GWAPT, btw. Title: Re: Sans GCIA Post by: Manu Zacharia (-M-) on July 11, 2010, 03:08:25 AM Congrats Dark_Knight and all the best for your next move - You can do it :)
Also I would request your experience preparing for GWAPT so that interested members can get some inputs and plan accordingly Title: Re: Sans GCIA Post by: Dark_Knight on July 11, 2010, 09:39:27 AM Thanks for the responses guys :)
Congrats Dark_Knight and all the best for your next move - You can do it :) Also I would request your experience preparing for GWAPT so that interested members can get some inputs and plan accordingly Already done in another thread :) Title: Re: Sans GCIA Post by: What90 on July 13, 2010, 04:58:21 AM It's a great course, and very different from GWAPT.
I'd offer the advice to read up on hex and packets before hand. This will help avoid the head crushing pain of attempting to read packets in Hex on day two :-) Laura Chappell's excellent Wireshark box would be a great pre-course read too. Title: Re: Sans GCIA Post by: ajohnson on July 13, 2010, 07:47:56 AM I'd offer the advice to read up on hex and packets before hand. This will help avoid the head crushing pain of attempting to read packets in Hex on day two :-) Do you have any good resources for this? I've gone through the Wireshark book and have several other TCP/IP books, and there's always the RFCs. I didn't know if there were any other online tutorials, etc. Thanks. Title: Re: Sans GCIA Post by: ziggy_567 on July 13, 2010, 09:49:34 AM I do not have my GCIA, dynamic, but I took one of the practice tests about a month ago (trying to figure out if I'm going to challenge it or not). I would suggest reading a Snort book or two. At the very least, read the online documentation for Snort.
I don't believe Wireshark is included in the exam objectives, but Snort definitely is! Good luck! Title: Re: Sans GCIA Post by: Dark_Knight on October 15, 2011, 08:37:28 AM Update: So I passed this exam earlier this week.
In addition to the courseware I also used Practical Packet Analysis by Chris Sanders and referenced Fyodors Nmap Network Scanning book. As with all SANS courses, indexing the material is key. The course material was interesting. I assure you that when your through you will no longer look at an IDS/IPS the same way. Being able to read raw packets and interpret the HEX was fun. Had a good time. Title: Re: Sans GCIA Post by: millwalll on October 15, 2011, 12:14:34 PM Well done :P
Title: Re: Sans GCIA Post by: Porter Carey 423 on February 09, 2012, 04:23:19 PM So I’m trying my best to make time to study for my SANS Intrusion Analyst (GCIA) exams. I just passed a practice test using no resources whatsoever, so that boosted my confidence a bit, but overall I’m a bit worried.I’ve had to put forth relatively little effort to get the certifications I have thus far, but I’m thinking this one’s going to be different. This one is the first that’s supposed to represent actual expertise, as opposed to just familiarity. ;D
Powered by SMF 1.1.18 |
SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com |