I took TryHackMe SAL1 (UnFiltered Review)

Summary

This video reviews TryHackMe's new Security Analyst Level 1 certification (S1), providing insights into the exam's structure, topics covered, and its real-world applicability. The exam is designed for beginners and includes hands-on scenarios, teaching core concepts such as network basics, cybersecurity frameworks, tools, incident response, and day-to-day activities in a Security Operations Center (SOC). The presenter emphasizes that the certification is valuable for those serious about cybersecurity careers, offering practical skills recognized in the industry. The video also discusses how to add this certification to a resume to increase hiring chances, and the importance of continuous learning in the field.

Takeaways

• 😀 Try Hack Me released the first official Security Analyst Level 1 (S1) certification, which has sparked diverse opinions within the cyber security community.
• 😀 The S1 exam is designed for individuals aiming to work in cyber security, especially in roles like Security Operations Center (SOC) Analyst, with practical, hands-on exercises.
• 😀 The exam consists of two main parts: fundamentals (networking, operating systems, cyber security frameworks) and the SOC simulation, where candidates respond to real-world security incidents.
• 😀 The S1 exam emphasizes practical skills over theoretical knowledge, challenging candidates to use real-world tools like Splunk, Wazuh, and Elastic to simulate real cyber security scenarios.
• 😀 It's crucial for cyber security professionals, especially those in entry-level roles, to understand common cyber security attacks, tools, and frameworks as part of their foundational knowledge.
• 😀 For those worried about recognition, it's explained that industry professionals prioritize hands-on skills and familiarity with tools over certifications alone, including those from Try Hack Me.
• 😀 Study resources for S1 are available directly through Try Hack Me, including pre-security training and targeted modules, with no need for external materials.
• 😀 Completing the S1 certification demonstrates essential knowledge for junior analysts, making it easier to land interviews and cyber security job opportunities.
• 😀 While the S1 certification itself doesn't guarantee a job, it prepares candidates for the real world by helping them develop relevant skills and knowledge employers seek.
• 😀 The S1 certification is an excellent starting point for beginners, with a gamified approach to learning that eases individuals into more complex cyber security concepts.

Q & A

What was the main focus of the exam discussed in the video?

The exam focused on simulating a real-world Security Operations Center (SOC) environment, where the participants had to handle alerts and perform tasks that a SOC analyst would do in their daily work.

How did the exam simulate a real-world scenario?

The exam included practical tasks, such as analyzing alerts, similar to what would be done in an actual SOC environment. This gave participants a sense of what working in a SOC feels like.

What role does TryHackMe training material play in preparing for the exam?

The TryHackMe training material was instrumental in preparing for the exam. The exam content closely mirrored the training, making it sufficient for passing the exam, even for someone with no prior blue team experience.

Did the individual pass the exam on their first attempt?

No, the individual did not pass the exam on their first attempt. They struggled with the first module but felt more confident during the second module, though they did not achieve an average score to pass.

How did the individual feel about the preparation time for the exam?

The individual felt that the preparation time was short, especially with only one week to study. They noted that they didn't have enough time to familiarize themselves fully with the exam environment.

What is the benefit of using TryHackMe for blue team training, especially for non-technical professionals?

For professionals in roles like Governance, Risk, and Compliance (GRC), TryHackMe provides valuable insights into blue team operations and security environments. It helps them understand security concepts and assessments better, even if they are not in technical roles.

What did the individual learn from taking the exam despite not passing?

The individual learned a lot from the experience, particularly the practical application of blue team skills. They plan to review their weak areas and retake the exam to improve their performance.

What is the second attempt policy for the exam?

The second attempt at the exam is free, giving the participant an opportunity to review their mistakes and study further before trying again.

How did the individual balance studying and other activities during the preparation?

The individual studied while enjoying the scenic location of a touristy island, which shows that it was possible to study in a relaxed environment, making the process enjoyable despite the challenges.

What advice does the speaker give to others considering the TryHackMe training and exam?

The speaker encourages others to take the challenge, study the material, and consider taking the course to kickstart a cybersecurity career. They also emphasize that the course is beneficial even for those not in technical roles.