Skip to content
induwara.lk
eCTHP - Certified Threat Hunting Professional exam voucher
INEeCTHPProfessional

eCTHP - Certified Threat Hunting Professional

The eCTHP - Certified Threat Hunting Professional exam voucher costs Rs 64,900/= at induwara.lk, payable in Sri Lankan rupees by card or bank transfer. It is an official single-use voucher for the INE exam, not a practice test or a training course. The voucher is valid for 12 months from purchase. After payment our team confirms your order and sends the voucher code by email.

What this voucher is

Sitting eCTHP - Certified Threat Hunting Professional? This is the INE exam voucher, priced locally. It is the exam fee itself — a single-use code you redeem when you book your exam with the vendor's testing provider. It is not a training course, a practice test bundle or a study guide.

Each voucher is valid for 12 months from the date of purchase, so you can book the exam when you are ready rather than the day you buy.

Who sits this exam

eCTHP - Certified Threat Hunting Professional is aimed at SOC analysts, network engineers and anyone moving into a security role. It is a professional-level exam and expects real working experience, not just study. Sri Lankan banks, ISPs and BPO firms hire against named security certifications, and the exam fee is usually the part that stalls people.

Why buy it here

Vendor exam fees are quoted in US dollars, which means the rupee price you actually pay depends on your card's rate on the day and whatever your bank adds on top. Here the price is fixed in rupees — Rs 64,900/= — so what you see is what leaves your account.

You can pay by card through PayHere, or by direct bank transfer if you would rather not put an exam fee on a card. Both are confirmed by us before anything is sent.

How delivery works

Delivery is handled by a person, not a script. Once your payment is confirmed, our team contacts you and sends the voucher code to the email address on your order. That usually happens the same day, and you will hear from us either way — if there is any delay sourcing a particular voucher, we tell you rather than leaving the order sitting.

If you need an invoice for an employer or a training budget, say so when you order and we will issue one against the order number.

Exam at a glance

PrerequisitesNone enforced — INE states 'Anyone can attempt the certification exam'. It describes the eCTHP as 'a certification for cybersecurity professionals with intermediate experience in defense security (blue or yellow teaming)' and recommends the updated Threat Hunting Professional Learning Path. Commercial requirement: 'To take the eCTHP exam, you'll need both an INE subscription and an exam voucher.'
Sat throughINE Security — performed inside INE's Virtual Labs. INE states that 'candidates are provided with a real world engagement within INE's Virtual Labs. Once valid credentials are provided for the certification platform, the candidate can perform the tests from the comfort of their home or office. An Internet connection and VPN software is necessary to carry out the exam.' Results are auto-graded and typically delivered within a few hours. No test centre.
Certification valid3
Price hereRs 64,900/=

Exam details are taken from the vendor’s own documentation. Anything we could not confirm there is left out rather than estimated.

What you get, and what happens next

What you get
One official single-use exam voucher for eCTHP, eCTHP - Certified Threat Hunting Professional, covering the exam fee in full. It is a code, not a study course and not a practice test. There is nothing physical to ship and no delivery charge.
When it arrives
Emailed to the address on your order once we have confirmed the payment, by a person rather than automatically. In practice that is usually the same day and almost always within one working day. If sourcing a particular voucher is going to take longer, we tell you rather than leaving the order sitting.
How long it stays valid
12 months from purchase. Book and sit the exam before it expires, a code that has simply run out of time cannot be replaced, so do not buy months ahead of when you plan to use it.
How you redeem it
Redeemed inside INE's own certification dashboard. There is no test centre and no separate booking to make. The code unlocks the attempt on your account.
If the code does not work
If the vendor rejects it when you try to redeem it, tell us straight away and we replace it or refund you in full. Contact us before the voucher’s own expiry date.
If you do not pass
A voucher covers one attempt. A retake needs a new voucher, and the vendor, not us, sets how long you must wait before sitting the exam again. Check the vendor’s retake policy before you book.
Changing your mind
Full refund for any reason as long as we have not yet sent the code, including if you realise you have ordered the wrong exam, which is easy to do when codes look alike. Once the code has been sent it cannot be refunded, because the code is the product and it is single-use. Refunds & delivery in full.

What the exam covers

  • Endpoint Threat Hunting (30-40%)
  • Network Threat Hunting (25-30%)
  • Threat Hunting Methodology (10-15%)
  • Threat Hunting Strategies (10-15%)
  • Cyber Threat Intelligence (10-15%)
  • Network packet and traffic analysis using Wireshark and tcpdump capture and display filters
  • Constructing investigations in Splunk and ELK to identify IOCs and TTPs in endpoint logs
  • Distinguishing legitimate from malicious files, processes, registry entries and scheduled tasks on Windows
  • Applying MITRE ATT&CK and the Cyber Kill Chain to identify and categorise adversary behaviours

Where it leads

Threat hunter, senior SOC analyst, detection engineer and security operations specialist — INE names security and SOC analysts, cybersecurity administrators, cybersecurity engineers and incident responders among its audience. Locally it is a differentiator for analysts in bank and telco SOCs and in managed-security firms, where proactive hunting is usually the capability a client pays a premium for.

Sitting this exam in Sri Lanka

Threat hunting is a maturity step above monitoring, and the organisations in Sri Lanka that staff for it are mostly the larger banks, telcos and the managed-security providers delivering SOC work to overseas clients. The eCTHP is useful here precisely because it is graded on doing a hunt rather than describing one. Practically, the one requirement worth checking before you buy is connectivity: INE states in plain terms that an internet connection and VPN software are necessary to carry out the exam, and that the VPN credentials are managed from your certification area — so a stable home or office line matters more than it would for a written exam. There is no test centre to attend, and INE requires a subscription alongside the voucher.

Where these details come from

Every fact on this page was read off the vendor’s own documentation. Vendors change exam content, pricing and retirement dates without notice, so check these before you book.

eCTHP exam fee and questions people ask

I have an eCTHP voucher from before mid-2025 — can I still use it?
If it was purchased before 19 June 2025, probably not. INE's notice says the previous version of the exam was retired and that older vouchers were usable 'through January 2026'. That deadline has passed. INE still links a voucher-exchange programme from the same panel without publishing a closing date, so contact INE before writing a voucher off.
Is the eCTHP a multiple-choice exam?
No, and INE says so directly: 'Instead of putting you through a series of multiple-choice questions, you are expected to perform an actual threat hunt on a corporate network.' INE adds that the examination is modelled after real-world scenarios.
What do I need technically to sit the exam from home?
An internet connection and VPN software. INE states that candidates are given a real-world engagement inside INE's Virtual Labs and, once valid platform credentials are issued, can perform the tests from home or office, and that 'an Internet connection and VPN software is necessary to carry out the exam'. The VPN credentials are managed from your certification area. This is the one INE exam whose page spells the connectivity requirement out.
Which areas carry the most marks?
Endpoint threat hunting at 30-40% and network threat hunting at 25-30% — between them, well over half the exam. Methodology, hunting strategies and cyber threat intelligence each sit in the 10-15% band. INE publishes these as ranges rather than fixed weights, which is why we quote them that way.
Does INE publish a pass mark or time limit for the eCTHP?
No. The page states only that you complete the exam 'within the allotted time' and gives no pass mark, so we will not quote one. What is confirmed: grading is automatic, results usually arrive within a few hours, and the score report shows performance in each section.
Do I need incident response experience first?
Not as a formal requirement. INE describes the target candidate as a cybersecurity professional with intermediate experience in defence security — it says 'blue or yellow teaming' specifically — and lists security and SOC analysts, cybersecurity administrators and engineers among the intended audience. Registration is not gated.
Do I need an INE subscription as well as the voucher?
Yes. INE states: 'To take the eCTHP exam, you'll need both an INE subscription and an exam voucher.' There is a bundle that pairs the voucher with three months of access. Include it in your cost planning.
What does the eCTHP voucher cost in Sri Lanka?
Our eCTHP voucher is Rs 64,900/=, payable in rupees, and issued against the current version of the exam.

Where to go next

The step before and the step after this one, plus a comparable exam from another vendor.

Sold by induwara.lk. Refunds & delivery. Questions about an order? Email [email protected]. Last updated 2026-09-22.