What is BTL1?

Blue Team Level 1 (BTL1) is a practical, hands-on cybersecurity training course and certification exam aimed at anyone looking to break into a defensive security career. Whether you're starting from scratch, transitioning from IT, or studying for your first security role, BTL1 is designed to build the real-world skills employers look for in junior security analysts.

The course covers six domains:

• Security Fundamentals - Core security, networking, management, and soft skills concepts.
• Phishing Analysis - Identifying, categorising, analysing, and responding to phishing emails, including artifact retrieval and risk mitigation.
• Digital Forensics - Windows and Linux forensic investigations using tools including Autopsy and Volatility, covering hard-drive and memory forensics.
• Threat Intelligence - Threat intelligence concepts, the differences between operational, strategic, and tactical intelligence, and hands-on use of MISP.
• SIEM - Using SIEM tools such as Splunk to aggregate and analyse security events, and detect and respond to potential incidents.
• Incident Response - Creating and implementing incident response plans, covering containment, eradication, recovery, and continuous improvement.

For full course details, pricing, and to enrol, visit the BTL1 certification page.

What's Included

Purchasing BTL1 gives you:

• 4 months access to the on-demand BTL1 training materials (written lessons, videos, quizzes, activities, labs)
• 100 lab hours (most clients use around 10-30 hours before passing the exam)
• 2 exam attempts that must be used within 12 months of starting
• (When certified) Physical rewards gift including a printed certificate, sticker, and challenge coin
• (When certified) Digital rewards gift including a Credly digital badge, digital certificate, and Blue Team Labs Online badge and title.

Why Choose BTL1?

BTL1 is a hands-on course where you work with real-world tools in lab environments. This gives you practical experience without needing to already be working in the field.

The practical, scenario-based format is designed to build skills that translate directly to job roles, and may help you stand out when discussing your experience during interviews.

What Others Are Saying

Before purchasing, it's worth reviewing first-hand accounts from people who have completed the certification.

• Search #BTL1 on LinkedIn (with quotes), filter by Posts, then Last 30 days to see recent client experiences.
• Look for student blog posts and YouTube reviews for opinions on the course content and exam.
• Reviews from verified purchasers who have been through the course. Click here to see the reviews on G2.