- The TCP/IP model
- Link layer operations
GIAC Certification Training Course
GIAC Certified Intrusion Analyst (GCIA) Certification Training Course
Prepare for the GIAC Certified Intrusion Analyst (GCIA) exam by learning to read traffic at the packet level, write IDS rules and find the attack in the noise.
Course focus: TCP/IP and the link layer, IP, TCP, UDP, ICMP and IPv6, fragmentation, tcpdump and Wireshark, application protocols, IDS architecture, rules and tuning, packet engineering and network forensics, aligned with GIAC's published GCIA objectives.
Course Overview
What the GCIA course covers and who it's for.
Accumentum's GCIA prep course is for SOC analysts, intrusion detection staff and network engineers who watch traffic for a living. GIAC says GCIA validates knowledge of network and host monitoring, traffic analysis and intrusion detection, including configuring and monitoring IDS and reading network traffic.
The course follows GIAC's published GCIA objectives. You'll dissect TCP/IP, IP headers, TCP, UDP, ICMP and IPv6, work with tcpdump filters and Wireshark, write and tune Snort and Zeek style IDS rules, and analyze packet capture, flow and log data with tools like SiLK. GCIA includes CyberLive hands-on questions, so you'll spend real time in packet captures.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of GIAC or the SANS Institute. GIAC sets the exam rules, fees and scoring, so check giac.org before you register for your attempt.
Course Objectives
Get ready for GCIA the way the exam actually tests.
01
Cover Every GCIA Objective
Work through each certification objective GIAC publishes for GCIA, in an order that builds on itself.
02
Practice Hands-On
GCIA includes CyberLive questions that run in real virtual machines, so labs are part of every module.
03
Build an Open-Book Index
GIAC exams are open book. We help you build and test the index you'll bring into the exam.
04
Know the Exam Before You Sit It
GCIA is 106 questions in 4 hours with a minimum passing score of 67%, per GIAC. We pace practice to match.
Who Should Attend
- SOC analysts and intrusion detection staff.
- Network engineers and administrators.
- System and security analysts.
- Hands-on security managers who review alerts.
Prerequisites
- There are no Accumentum enrollment prerequisites and GIAC doesn't require any to sit GCIA.
- You should be solid on networking. Network+, Security+ or GSEC level knowledge helps.
Pathway Map
The GCIA course in 8 modules.
Each module maps to one or more of GIAC's published GCIA certification objectives.
Course Content
- Dissecting IP headers for normal and odd values
- Fragmentation and fragmentation attacks
- How IPv6 differs from IPv4
- Typical and anomalous behavior for each protocol
- Writing tcpdump filters
- Analyzing normal and malicious traffic in Wireshark
- Dissecting and analyzing application layer protocols
- IDS placement and architecture options
- Strengths and weaknesses of common IDS tools
- Writing rules that catch real malicious activity
- Tuning and correlation
- Packet crafting and manipulation
- SiLK and other flow tools
- Pulling together packet capture, netflow and logs
Course Features
Built for the hands-on side of GCIA.
On-Demand Format
Self-paced video lessons you can start, pause and replay whenever it fits your schedule.
Hands-On Labs
Lab work in every module so the CyberLive portion of GCIA isn't the first time you've touched the tools.
Objective Mapping
Every lesson is tied to a published GCIA certification objective.
Exam Strategy
Time management, open-book indexing and practice under exam conditions.
Certification Exam
About the GIAC GCIA exam.
GCIA Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for GCIA the same way.
Per GIAC, the GCIA exam is one proctored exam with 106 questions, a 4 hours time limit and a minimum passing score of 67%. It's web based and proctored online through ProctorU or onsite at Pearson VUE.
GIAC can update exam specs, so confirm the details for your attempt in your GIAC account. Full details are on GIAC's GCIA page.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of GIAC or the SANS Institute. GIAC sets the exam rules, fees and scoring, so check giac.org before you register for your attempt.
Frequently Asked Questions
Common questions about Accumentum's GCIA prep course.
GIAC Certified Intrusion Analyst (GCIA) is a practitioner certification from GIAC. Per GIAC, the exam is 106 questions, 4 hours, with a minimum passing score of 67%, and it's proctored online through ProctorU or at a Pearson VUE center.
No. SANS course names and materials belong to the SANS Institute and only SANS teaches them. This is Accumentum's own on-demand prep for the GIAC exam, built from GIAC's published certification objectives.
Ask us when you request a quote. GIAC sells certification attempts and practice tests directly, and we'll walk you through what you need to buy from GIAC and when.
GIAC GCIA is listed on Air Force COOL. Contact us about funding options.
There are no Accumentum enrollment prerequisites and GIAC doesn't require any to sit GCIA. You should be solid on networking. Network+, Security+ or GSEC level knowledge helps.
Yes. GCIA includes CyberLive hands-on questions, so every module has labs with the same kinds of tools you'll use on the job.
On-demand and self-paced. You get video lessons, hands-on labs and practice questions, and you work through them on your own schedule.
Use the registration page linked below, or email info@accumentum.net and an advisor will follow up with access details and next steps.
Enrollment
Enroll in GCIA training with Accumentum.
Enroll in Accumentum's GCIA prep course to get ready for the GIAC Certified Intrusion Analyst (GCIA) exam with on-demand lessons and hands-on labs.
For access details and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on GCIA?
Start on your own schedule and work toward the test date you pick.