Focuses more on writing fucking reports than on Containment & Eradication; despite being titled Detection and Response, the only content on containment and Eradication was defining the terms. In contrast, we spent multiple videos, readings, and activities on *writing motherfucking reports*. The AI conversation to close out the course can be completed successfully after completing Course 3. And the SIEM process, which is discussed and outlined at least three different times, is presented with two DIFFERENT final steps--with completely different descriptions--which of course shows up on an assessment. It's a complete shit show.

While everything in terms of the methodology and command line is functional, the end of this course breaks down extremely quickly as using a third party tool such as Splunk's Cloud, rarely gives you the free trial they tout. Moving past that, and attempting to use Google's Chronicle, while functional, is extremely out of date and the site will fight you when trying to use the Legacy View as shown in the guide. This is easily, the worst and least functional course throughout the entire certificate.

Too much noise that distracts from the main point. Key points largely unclear. Videos had sound so low that even on max volume with speakers I couldn't follow what was being said. Didn't have this issue with all other instructors.

The material was good but the way of delivering was too fast paced and i personally found it difficult. There is more talking and less texts. Quizes are relatively harder and more confusing.