GCDA — GIAC Certified Detection Analyst
GIAC's certification focused specifically on detection engineering and building effective detection capabilities — an area where most other certs fall short. Covers developing and tuning SIEM rules, behavioral detection, MITRE ATT&CK-based detection strategies, and log source analysis. DoD 8140 approved. As organizations mature their security programs beyond alert response toward proactive detection development, GCDA fills an important gap that GCIA (which focuses on analysis of existing alerts) doesn't address. A strong cert for SOC analysts transitioning into detection engineering or security engineering roles.
| Issuer | GIAC / SANS Institute |
|---|
| Level | intermediate |
|---|
| Domains | Defensive Security / SOC |
|---|
| Practical weight | 25% |
|---|
| Cost (USD) | 999 |
|---|
| Renewal | 4 years |
|---|
| DoD 8140 | Yes |
|---|
| Skills | detection_engineering, siem_rule_development, alert_tuning, threat_detection_strategy, behavioral_detection, log_source_analysis, mitre_attack_detection |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap