CREST, Certified Network Intrusion Analyst
The Certified Network Intrusion Analyst (CC NIA) examination tests candidates’ knowledge of analysing network traffic and log files for evidence of potential compromise and analysing the potential underlying causes and infection vectors.
GIAC, Certified Intrusion Analyst (GCIA)
GIAC Certified Intrusion Analysts (GCIAs) have the knowledge, skills, and abilities to configure and monitor intrusion detection systems, and to read, interpret, and analyze network traffic and related log files.
Vendor Specific Training, Snort, ArcSight, Splunk, Narus, eEye, etc.
Vendor specific training on building deploying and managing an IDS also products which analyse pure log and network traffic.
SANS, SEC503: Intrusion Detection In-Depth
SEC503: Intrusion Detection In-Depth delivers the technical knowledge, insight, and hands-on training you need to defend your network with confidence. You will learn about the underlying theory of TCP/IP and the most used application protocols, such as HTTP, so that you can intelligently examine network traffic for signs of an intrusion.