The GCIA and SANS 503 is considered one of the cornerstones in the SANS/GIAC line-up. No certification can really prove that an interview candidate is capable when it comes to on-the-job performance, but it's interesting that your boss felt that they didn't understand basic security.

GCIA could be fun, since it's about detection, and I believe compliments the GCIH by focusing more on the defense side of things. That said, I would consider it easier to master than FOR508. And, rather than pure defense or offense, forensics kinda is defense, but with needing to know pretty deep technical stuff and how attacks work.

Before May/SANS WEST I want to knock out GCIA and GCIH. I was hoping to pass GCIA at the end of Feb and GCIH at the end of April. Certs: CISSP, EnCE, OSCP, CRTP, eCTHPv2, eCPPT, eCIR, LFCS, CEH, SPLK-1002, SC-200, SC-300, AZ-900, AZ-500, VHL:Advanced+ 2023 Cert Goals: SC-100, eCPTX

i don't have ECSA, so I'll tell you about GCIA instead. It's SANS "IDS" class. You'll learn a lot of great techniques and cool skills like reading packets in hex (to understand IOCs as the sensors do), packet crafting (to test sensor rules), secure network architecture design (for sensor placement), packet capture and analysis tools: tcpdump, Wireshark, and silk (to observe traffic …

GCIA Overall, GCFA is a good follow up to GCIH. GNFA after that would cover GCIA for you...to an extent. GNFA after that would cover GCIA for you...to an extent. Awesome, thanks for the input.

GCIA is considered one of the harder of the GIAC exams and I found it quite a bit harder then the GCIH. My score was still fine but the GCIA forces you to become a packet ninja. As far as whats best for after then GPEN, completely depends on what …

For those who have taken the GCIA + lab portion (pass or fail): 1. I've seen on more than one site, that an individual or two has failed the practice exam and passed the real GCIA exam. I've personally failed a GIAC practice exam and passed a real exam. People have passed the practice test and failed the real thing.

I plan to challenge this one this year without taking the class (I did the GPEN last year and there is a lot of overlap) GSEC is basic infosec knowledge GCIA is considered one of the hardest GIAC exam, there is no third-party books/video and it is on a more narrow subject.

They added the VM section to the exam last fall, so late some time in 2018. It's also part of the practice tests. I'd say that's the best way to prep for it. Do a couple of GCIA practice tests so you get a feel for how much time you need to complete each section.

I routinely hear the GCIA is one of the tougher 500 level SANS courses. I know that is not much consolation, but do not get disheartened. I will echo what dover said: did you challenge the exam or do you have the SANS course books? If you have the course books, they will have all the study material you need.