Home Certificates Security Blue Team BTL1 — Blue Team Level 1
Defense & Security Operations Beginner Online Available now

BTL1 — Blue Team Level 1

Security Blue TeamInternationally recognized accreditation body
🧪
Purely hands-on trainingReal-world labs & simulations
🏅
Internationally accreditedBy global bodies
📝
ValidityValid for life
🎯
Job-market readyIn-demand skills

About the certification

🛡️ Start your career in defensive cybersecurity with Blue Team Level 1 (BTL1) certification Centri Security Blue Team Level 1 (BTL1) Certification is a hands-on, entry-level certification in defensive cybersecurity (Blue Team), focused on developing practical skills in attack analysis, digital investigations, systems monitoring, and security incident response in realistic environments that simulate real work. Basic Training Topics (BTL1)

Certification content & modules

🔐Security Fundamentals
  • Basic security concepts such as the CIA Triad
  • Networking basics and OSI models
  • Operating systems (Windows / Linux)
  • Security policies and procedures
  • Risk management and compliance
📧Phishing Analysis
  • Analyzing suspicious mail messages
  • Identify malicious links and files
  • Use analysis tools to extract evidence
  • Assess threats and take protective measures
🧠Threat Intelligence
  • Understanding attackers’ behavior and methods
  • Analysis of Indicators of Compromise (IOCs)
  • Use platforms such as MISP and OpenCTI
  • Track threats and link them to attack campaigns
🕵️‍♂️Digital Forensics
  • Analyzing digital evidence on systems
  • Use tools such as Volatility, Autopsy and FTK Imager
  • Analyze memory, files and system logs
  • Reconstruction of events and attacks
📊Security monitoring and SIEM systems (Security Monitoring)
  • Log analysis
  • Use SIEM tools such as Splunk
  • Detect abnormal activities
  • Investigate security alerts and correlate events
🚨Incident Response
  • PICERL methodology for dealing with incidents
  • Determine the source and scope of the attack
  • Containment, treatment and recovery
  • Preparing security reports
👨‍💻Who is this certificate for?
  • Cybersecurity Entry Level (0–2 years of experience)
  • SOC Analysts
  • Incident response engineers
  • Forensics Analysts
  • Those interested in entering the Blue Team field

What you'll learn

  • Blue Team Roles
  • Soft Skills
  • Physical Security
  • Network Security
  • Endpoint Security
  • Email Security
  • Networking 101
  • OSI Model
  • Network Devices
  • Management Principles
  • Risk
  • Policies and Procedures
  • Compliance
  • Active DIrectory

Quick details

LevelBeginner
Delivery MethodOnline

Official certificate information

Exam duration
24 Hours — Fully Practical Exam (Real Security Incident In-Lab Investigation) Unattended and Open Book System, 20 Practical Tasks, Immediate Correction and Detailed Feedback. Success 70% (Silver) and 90% or more on first attempt (Gold)
Voucher validity
12 months from date of purchase (4 months course arrives separately)
Exam retake
One free return attempt included in the certificate price (basic + return), with a waiting period of 10 days before return, additional attempts can be purchased (around £100–123 per attempt)
Certificate validity
Lifetime — Certificate does not expire and does not require renewal or annual maintenance fees