TechWaymark provider guide

Security Blue Team
Certifications with purpose.

Cybersecurity. Explore the credentials in our library, then check the provider's requirements against your next move.

Choose the work first

Explore the certification family.

Grouped by area of work, not a required exam sequence. Select a guide for a closer look.

Find a credentialArea of work

1 matching guides · Check the status before starting study.

A closer look

Learning focus: Foundational defensive-security practice
Where you could apply it: BTL1 is a possible structured route into blue-team practice. Use exercises to explain observations, investigation choices and conclusions, and check whether the target vacancy asks for a particular credential.
Before you start: Read the current provider requirements. Recommended preparation and mandatory certification prerequisites are different.

Learning and role connections are TechWaymark guidance. The official syllabus defines exam coverage.

Go to the sourceAvailable · Vendor record checked 2026-09-19

Where Blue Team Level 1 can lead · requirements and possible next steps

Vendor requirements and TechWaymark suggestions are labelled separately. You do not need to collect every credential.

Editorial learning sequence

Develops introductory blue-team investigations toward the current CyberDefenders CCDL2 investigation and forensic workflow.

Sources and overlap

SIEM, evidence and incident topics overlap; compare current lab depth before buying another training bundle.

Relationship reviewed 2026-09-24

Editorial learning sequence

Connects introductory investigation practice with a broader incident-handling and response approach.

Sources and overlap

Triage and evidence overlap; deeper response responsibilities should drive the next credential.

Relationship reviewed 2026-09-24