Skip to certification content

The eCTHP overview outlines threat hunting domains, lab expectations, and renewal guidance for proactive defenders.

The Exam

The eCTHP is the only certification that challenges hands-on threat hunters inside a fully featured, real-world environment.

About the Certification Exam

Candidates hunt inside the Virtual Labs instead of answering multiple-choice questions; you uncover adversary activity and recommend defensive strategies as part of the assessment.

  • Network Packet/Traffic Analysis
  • Memory Analysis/Forensics
  • Data Enrichment and Correlation
  • IOC-Based Threat Hunting

Domains + Objectives

Each eCTHP domain mirrors a phase of a professional threat hunting mission.

35%30%15%10%10%
Endpoint Threat Hunting (35%)
Network Threat Hunting (30%)
Threat Hunting Methodology (15%)
Threat Hunting Strategies (10%)
Cyber Threat Intelligence (10%)

Endpoint Threat Hunting (35%)

  • Hunt suspicious endpoint artifacts
  • Analyze memory and disk traces

Network Threat Hunting (30%)

  • Profile network traffic for anomalies
  • Spot behavioral patterns that signal adversaries

Threat Hunting Methodology (15%)

  • Apply structured hunting methods
  • Document hypothesis-driven searches

Threat Hunting Strategies (10%)

  • Devise strategic hunting campaigns
  • Tune hunting playbooks

Cyber Threat Intelligence (10%)

  • Translate CTI into hunts
  • Attribute activity to adversaries

Who It's For

The eCTHP is for cybersecurity professionals with defensive experience who want credentialed proof of their hunting skills.

Anyone can attempt the certification exam; however, it is designed for:

  • Security Analysts/SOC Analysts
  • Cybersecurity Administrators
  • Cybersecurity Engineers
  • Cybersecurity Incident Responders

Get eCTHP Certified

Pair a subscription with the eCTHP voucher so you can align threat hunting training and the exam attempt in one flow.

50% off Voucher

Premium Subscription

Access the Threat Hunting Path and redeem a subscriber voucher discount.

Get Started
eCTHP Voucher Included

eCTHP + Prep Bundle

Three months of the threat hunting labs and instruction bundled with the voucher.

Get Started

Already a subscriber? Purchase the eCTHP voucher through Premium.purchasing the eCTHP voucher

The Process

Track these steps from voucher purchase through the lab to earn the eCTHP.

Shop Certification Vouchers

To earn the eCTHP Certification, follow these steps:

1

Purchase a certification exam voucher

Secure the eCTHP voucher during checkout.

2

Start preparing

Work through threat hunting labs within the voucher's 180-day window.

3

Take your exam

Execute the threat hunt in the live lab before time expires.

4

Receive your results

Results arrive quickly so you can act on the findings.

Valid for three years; refresh the credential with flexible renewal paths when you are ready.flexible renewal options