Fifty questions, two hours, seventy percent. EC-Council attaches no weighting to any of the eight CTIA areas, so the only ordering signal in the syllabus is the shape it is written in: the intelligence cycle, start to finish.
Naming an objective Malware as a Collection Source reclassifies a whole discipline into an intelligence input. Nine unweighted objectives, and why coverage beats a mark budget on this paper.
Detection Engineering carries 40 percent of Splunk SPLK-5002. This guide walks through correlation search tuning, risk-based alerting, the detection lifecycle, SOAR playbooks and the metrics that prove a SOC programme works.
