Which SANS course to take?

I passed my GCIH earlier this year and just passed the CISSP exam. I can budget for one next year. Debating between GCED, GMON, and GCIA. I want to keep getting stronger with blue team stuff. Which would would be a good next step?

Find more posts tagged with

Comments

cyberguypr

Right off the bat I would say do not do GCED. It has some content from GCIH and will not do much to strengthen you as a blue teamer. Are you talkign about just the exam or the corresponding class?

E Double U

I know two people that have taken SEC511 and they were underwhelmed.

SEC503 was useful for me because of my NIDS work.

markulous

The class as well. I definitely want the full experience again along with Netwars. So GCIA or GMON may be better?

sb97

If you do Intrusion Analysis (Or really any type of packet analysis) then GCIA is a heckuva good course

markulous

My coworker is taking the GMON, so maybe GCIA is a good balance to that. I do a little packet analysis, but I'm going to be doing more soon and I feel it's something I need to get stronger in.

temuchin

i'd recommend gcia

DonTico

GCIA for sure