Blue Team Level 2 (BTL2)
Lessons available in 9 languages with native text-to-speech (beta)
BTL2 is our advanced certification for building deeper investigative and analytical skills in security operations teams. It focuses on complex attack scenarios and equips professionals with the skills needed to detect, analyse, and respond to advanced threats.
It’s designed to improve detection depth, strengthen investigation quality, and mature incident response across security operations, providing a clear development path for analysts.
Skills Your Team Will Gain
Blue Team Level 2 (BTL2)
Recommended experience
2+ years' experience
Estimated time to complete
approximately 50 hours to complete
On-demand access
Complete in 5 months
Who is the course for?
BTL2 is designed for professionals with existing experience in security operations who are looking to advance their technical capability, including:
- Mid–Senior Security Analysts
- Mid–Senior Incident Responders
- Security Consultants
- DFIR Specialists
- Threat Hunters
- Malware Analysts
Why choose BTL2?
BTL2 is designed for practitioners working in security environments who want to develop more advanced skills. It focuses on real-world scenarios that reflect modern attack techniques and evolving threats.
The certification helps teams improve detection coverage, reduce risk exposure, and respond more effectively to complex threats building an advanced defender skill set.
- Vulnerability Management - Identify, analyse, prioritise, and remediate vulnerabilities to reduce risk
- Malware Analysis - Conduct static and dynamic analysis to gather indicators of compromise and understand behavior
- Adversary Emulation - Simulate attacker activity to identify SIEM detection gaps and improve visibility
- Threat Hunting - Perform hunts across systems and at scale to detect adversaries post-breach
Malware Analysis
107 topics
4 quizzes
17 labs
What Your Team Will Learn
Lessons
- Introduction to Malware Analysis
- Setting up a Malware Analysis Home Lab
- Static Malware Analysis
- Dynamic Malware Analysis
- Windows Internals
- Assembly Language
- Reverse Engineering - C Code Constructs
- Advanced Analysis
- Different Malware Types
- Malware Analysis Practice
Skills Your Team Will Learn
Threat Hunting
Advanced SIEM
Vulnerability Management
BTL2 Exam Preparation
Ready to strengthen your team's capabilities?
To find out more about how your SOC is operating take our SOC Leaders Maturity Assessment and gain a clear picture of your SOC’s effectiveness in minutes.
Our maturity assessment benchmarks your capabilities, identifies gaps, and delivers a personalized report with prioritized actions to strengthen your security operations.