BTL1 case studies

Blue Team Level 1 (BTL1) is a practical, entry-level defensive cybersecurity certification from Centri (Security Team Training Ltd). It is built for security enthusiasts and professionals who want hands-on defensive skills, and the vendor positions it for students, IT personnel, security analysts, incident responders, threat intelligence analysts, and forensics analysts, with a recommended experience level of 0-2 years. The exam is a 24-hour practical incident response exam with immediate grading and feedback, and the syllabus spans Phishing Analysis, Threat Intelligence, Digital Forensics, Security Information and Event Monitoring, and Incident Response, taught alongside tools such as Splunk, Wireshark, Autopsy, Volatility, VirusTotal, MISP, TheHive5, and Sigma. Preparation is lab-driven: the purchase includes 4 months of on-demand access to 330+ lessons, videos, activities, and quizzes plus 23 browser labs with 100 hours of access, and the vendor strongly recommends completing every lab because they are designed to prepare you for the practical exam. The BTL1 case studies are 5 cases and about 3,108 words.