Want a sequenced plan instead of a list? Join the structured learning tracks

Cert Atlas

CCDL2

Certified CyberDefender Level 2 (formerly CCD)

Defensive Advanced CyberDefenders
Target job title
SOC Analyst (Tier 2) / DFIR Analyst
Level
Advanced. Built for practitioners with real experience; often hard experience gates.
Prerequisites
SOC fundamentals, Windows/Linux artefacts and networking. CCDL1 is the associate-level step.
Official page
CyberDefenders

Recent updates

Renamed from CCD to CCDL2 when CCDL1 launched; existing CCD badges were updated automatically. 48-hour Elastic-based investigation exam.

Reviewed 2026-10-02. Source. Confirm exam details on the official page before booking.

Where it sits in Defensive Security

  1. Entry BTL1 TryHackMe SAL1 CompTIA Security+ Google Cybersecurity Microsoft SC-900 ISC2 CC CCDL1
  2. Intermediate HackTheBox CDSA TryHackMe SAL2 CompTIA CySA+ CompTIA SecAI+ SPLK-5001 OSDA GCIH Microsoft SC-200
  3. Advanced BTL2 CCDL2 CompTIA SecurityX

Preparing for CCDL2?

Structured learning tracks

Membership with role- and cert-based learning tracks: roadmaps, cheat sheets, assessments, exclusive writeups and member pricing on notes.

Join the learning tracks

Coaching & cert roadmaps

One-to-one guidance and a roadmap built around your background, target role and timeline, so you stop guessing which cert comes next.

See coaching programs

Prep resources & cheat sheets

Cheat sheets, command references and exam-day extras for when you already know the material and need it fast and in one place.

Browse prep resources