eCTHP

Certified Threat Hunting Professional

About the Certification

This is a professional certification specialized in Threat Hunting, offered by Mile2. It focuses on proactive threat hunting within enterprise environments rather than relying solely on traditional alerts. The certification aims to prepare professionals to understand attacker behavior, perform deep security data analysis, track Indicators of Compromise (IOCs), and detect advanced threats that may bypass conventional security tools. It covers Threat Hunting methodologies, log and network traffic analysis, use of analysis tools, and building hunting hypotheses to uncover hidden threats. This certification is well suited for cybersecurity analysts, SOC teams, and Blue Team professionals, and represents a strong credential for working in enterprise environments that require advanced threat detection and proactive response capabilities.

Main Curriculum

The curriculum is divided into six main sections

  • Threat Hunting Fundamentals
    • What Threat Hunting is and why it matters
    • Difference between Detection and Hunting
    • Advanced threats and APTs
    • Attack lifecycle (Kill Chain)
  • Threat Hunting Tools & Techniques
    • Endpoint-based threat hunting
    • Network traffic analysis
    • Detecting lateral movement
    • Command and Control (C2) detection
  • Threat Intelligence & Adversary Tactics
    • Using Threat Intelligence
    • Understanding the MITRE ATT&CK Framework
    • Attacker behaviors and techniques
    • Building hunting hypotheses
  • Incident Response & Reporting
    • Using SIEM for Threat Hunting
    • EDR / XDR concepts
    • Query-based hunting
    • Automation basics in hunting
  • Data Collection & Log Analysis
    • Data sources (Logs / Telemetry)
    • Log analysis from systems and networks
    • SIEM data correlation
    • Detecting anomalous patterns
  • Endpoint & Network Threat Hunting
    • Integrating Threat Hunting with Incident Response
    • Documenting hunting results
    • Writing professional reports for management
    • Improving detection rules based on hunting outcomes

Exam Details :

  • Exam code: eCTHP
  • Exam duration: 240 minutes (4 hours)
  • Number of questions: Approximately 100 questions
  • Question types: Multiple choice + practical scenarios
  • Language: English
  • Passing score: Approximately 70% or higher
  • Exam fee: Approximately USD 849–999
  • Certification validity: 3 years (CPEs required for renewal)

Do I need certifications before it ?

Not mandatory.

 However, for those seeking a strong professional path in Cyber Threat Hunting especially in proactive threat analysis, malicious behavior tracking, and advanced hunting techniques the eCTHP (Certified Threat Hunting Professional) certification is considered the strongest option.

Which certifications are recommended after this certification ?

It is not mandatory,
but if there is a need for a strong path in cyber threat hunting, especially in proactive threat analysis, malicious activity detection, and enhancing SOC team capabilities, then the Certified Threat Hunting Professional certification is the strongest option.

What are the main uses of the eCTHP – Certified Threat Hunting Professional certification ?

  • Advanced Threat Hunting Methodologies Deep specialization in hypothesis-driven and behavior-based threat hunting beyond alerts.
  • MITRE ATT&CK–Driven Hunting Using the MITRE ATT&CK framework to detect attacker techniques and improve hunting accuracy.
  • Endpoint, Network & Log-Based Hunting Hunting across EDR, network traffic, and logs with multi-source activity analysis.
  • Threat Intelligence & Behavioral Analytics Combining threat intelligence with behavioral analysis to detect advanced and unknown threats.
  • Detection Engineering & Use Case Development Building custom detection rules and converting hunting results into operational SOC detections.
  • Threat Hunter / Senior Blue Team Analyst / Detection Engineer Transitioning into advanced roles focused on proactive defense and detection engineering.

Your First Step Toward Cyber Threat Hunting :

The Certified Threat Hunting Professional (eCTHP) is an advanced certification in Cyber Threat Hunting and Defensive Security. It validates your ability to detect advanced threats that bypass traditional security controls by leveraging behavioral analysis, proactive hunting, Threat Intelligence, and the MITRE ATT&CK framework. The certification demonstrates advanced skills in attack analysis, IOC hunting, and proactive threat response within complex enterprise environments, significantly enhancing opportunities for roles such as Threat Hunter, SOC Analyst (Tier 2/3), and Cybersecurity Analyst, especially in organizations focused on advanced defense and critical infrastructure protection.

Who is this certification suitable for ?

  • Threat Hunters or SOC Analysts.
  • Professionals interested in behavioral analysis and advanced threat detection.
  • Those actively using Threat Intelligence and hunting techniques.
  • Individuals looking to advance skills in SIEM / EDR and hunting tools.
  • Anyone planning to grow within Cybersecurity Operations (Blue Team).

In Short :

A strong, hands-on certification focused on advanced threat detection and proactive hunting within cybersecurity environments, enabling professionals to uncover hidden threats and protect enterprise systems more effectively.

Get Certified Today

Register Now And Get Your Certificate