TechWaymark provider guide

Security Blue Team
Certifications with purpose.

Cybersecurity. Explore the credentials in our library, then check the provider's requirements against your next move.

Choose the work first

Explore the certification family.

Grouped by area of work, not a required exam sequence. Select a guide for a closer look.

Find a credentialArea of work

1 matching guides · Check the status before starting study.

A closer look

Study focus: Defensive investigation across phishing, threat intelligence, digital forensics, SIEM and incident response.
Where you'd use it: Useful when a junior defender needs to follow evidence from an initial report through to a clear investigation note.
Our preparation advice: Know basic networking, operating systems and log formats. Practise separating what the evidence proves from what you suspect.

Go to the sourceAvailable · Vendor record checked 2026-09-19

Where Blue Team Level 1 can lead · requirements and possible next steps

Vendor requirements and TechWaymark suggestions are labelled separately. You do not need to collect every credential.

Editorial learning sequence

Develops introductory blue-team investigations toward the current CyberDefenders CCDL2 investigation and forensic workflow.

Sources and overlap

SIEM, evidence and incident topics overlap; compare current lab depth before buying another training bundle.

Relationship reviewed 2026-09-24

Editorial learning sequence

Connects introductory investigation practice with a broader incident-handling and response approach.

Sources and overlap

Triage and evidence overlap; deeper response responsibilities should drive the next credential.

Relationship reviewed 2026-09-24