GCDA holders have demonstrated their ability to collect, analyze, and tactically use modern network and endpoint data sources to detect malicious or unauthorized activity. The GCDA certification focuses on data gathering strategies used to collect, aggregate, parse, analyze, and store computer logs. Professionals holding the GCDA are qualified for hands-on and leadership positions which deal with Security Information and Event Management (SIEM).