.

Sans GCIA

<<

Dark_Knight

User avatar

Sr. Member
Sr. Member

Posts: 294

Joined: Mon Aug 11, 2008 7:03 pm

Post Fri Jul 09, 2010 9:06 pm

Sans GCIA

So having just recently completed the GWAPT, I now have my sights  set on the GCIA.  :)

Any thoughts?
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Fri Jul 09, 2010 9:56 pm

Re: Sans GCIA

What's there to think about? DO IT! ;D

Congrats on the GWAPT, btw.
The day you stop learning is the day you start becoming obsolete.
<<

morpheus063

User avatar

Sr. Member
Sr. Member

Posts: 393

Joined: Sun Jun 25, 2006 10:08 am

Location: Cochin - India

Post Sun Jul 11, 2010 3:08 am

Re: Sans GCIA

Congrats Dark_Knight and all the best for your next move - You can do it :)

Also I would request your experience preparing for GWAPT so that interested members can get some inputs and plan accordingly
Manu Zacharia
MVP (Enterprise Security), ISLA-2010 (ISC)², C|EH, C|HFI, CCNA, MCP,
Certified ISO 27001:2005 Lead Auditor

[b]There are 3 roads to spoil; women, gambling & hacking. The most pleasant with women, the quickest with gambling, but the surest is hacking - c0c0n
<<

Dark_Knight

User avatar

Sr. Member
Sr. Member

Posts: 294

Joined: Mon Aug 11, 2008 7:03 pm

Post Sun Jul 11, 2010 9:39 am

Re: Sans GCIA

Thanks for the responses guys  :)


Manu Zacharia (-M-) wrote:Congrats Dark_Knight and all the best for your next move - You can do it :)

Also I would request your experience preparing for GWAPT so that interested members can get some inputs and plan accordingly


Already done in another thread  :)
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
<<

What90

Full Member
Full Member

Posts: 120

Joined: Sat Jun 09, 2007 2:23 am

Location: Syndey, Australia

Post Tue Jul 13, 2010 4:58 am

Re: Sans GCIA

It's a great course, and very different from GWAPT.

I'd offer the advice to read up on hex and packets before hand. This will help  avoid the head crushing pain of attempting to read packets in Hex on day two :-)


Laura Chappell's excellent Wireshark box would be a great pre-course read too.
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Tue Jul 13, 2010 7:47 am

Re: Sans GCIA

What90 wrote:I'd offer the advice to read up on hex and packets before hand. This will help  avoid the head crushing pain of attempting to read packets in Hex on day two :-)


Do you have any good resources for this? I've gone through the Wireshark book and have several other TCP/IP books, and there's always the RFCs. I didn't know if there were any other online tutorials, etc. Thanks.
The day you stop learning is the day you start becoming obsolete.
<<

ziggy_567

User avatar

Sr. Member
Sr. Member

Posts: 378

Joined: Tue Dec 30, 2008 1:53 pm

Post Tue Jul 13, 2010 9:49 am

Re: Sans GCIA

I do not have my GCIA, dynamic, but I took one of the practice tests about a month ago (trying to figure out if I'm going to challenge it or not). I would suggest reading a Snort book or two. At the very least, read the online documentation for Snort.

I don't believe Wireshark is included in the exam objectives, but Snort definitely is!

Good luck!
--
Ziggy


eCPPT - GSEC - GCIH - GWAPT - GCUX - RHCE - SCSecA - Security+ - Network+
<<

Dark_Knight

User avatar

Sr. Member
Sr. Member

Posts: 294

Joined: Mon Aug 11, 2008 7:03 pm

Post Sat Oct 15, 2011 8:37 am

Re: Sans GCIA

Update: So I passed this exam earlier this week.

In addition to the courseware I also used Practical Packet Analysis by Chris Sanders and referenced Fyodors Nmap Network Scanning book.

As with all SANS courses, indexing the material is key.

The course material was interesting. I assure you that when your through you will no longer look at an IDS/IPS the same way. Being able to read raw packets and interpret the HEX was fun.

Had a good time.
Last edited by Dark_Knight on Sat Oct 15, 2011 8:50 am, edited 1 time in total.
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
<<

millwalll

Post Sat Oct 15, 2011 12:14 pm

Re: Sans GCIA

Well done :P
<<

Porter Carey 423

Newbie
Newbie

Posts: 2

Joined: Wed Feb 08, 2012 5:53 pm

Post Thu Feb 09, 2012 5:23 pm

Re: Sans GCIA

So I’m trying my best to make time to study for my SANS Intrusion Analyst (GCIA) exams. I just passed a practice test using no resources whatsoever, so that boosted my confidence a bit, but overall I’m a bit worried.I’ve had to put forth relatively little effort to get the certifications I have thus far, but I’m thinking this one’s going to be different. This one is the first that’s supposed to represent actual expertise, as opposed to just familiarity. ;D

Return to Incident Response

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software