Get in Touch
 Duration 21 hours

Course Outline

Foundations of Incident Handling

  • Comprehending the nature of cybersecurity incidents
  • Objectives and value of structured incident handling
  • Adherence to incident response standards and frameworks (NIST, ISO, etc.)

The Incident Response Methodology

  • Preparatory measures and strategic planning
  • Threat detection and analytical assessment
  • Categorization and priority setting

Containment Protocols

  • Distinguishing between short-term and long-term containment
  • Techniques for network segmentation and isolation
  • Aligning with stakeholders and executing notification protocols

Eradication and System Recovery

  • Pinpointing root causes of the breach
  • Restoring systems and applying necessary patches
  • Ongoing monitoring following recovery

Record Keeping and Reporting

  • Best practices for documenting incidents
  • Creating actionable post-mortem analyses
  • Extracting lessons learned and defining improvement metrics

Incident Response Tools and Technologies

  • Utilizing SIEM platforms and log analysis utilities
  • Deploying Endpoint Detection and Response (EDR) solutions
  • Integrating automation and orchestration into IR processes

Tabletop Exercises and Simulations

  • Interactive incident scenarios for practice
  • Drills focused on team coordination
  • Assessing the effectiveness of response actions

Wrap-Up and Forward-Looking Steps

Requirements

  • Fundamental grasp of IT security principles
  • Working knowledge of network protocols and system administration
  • Recognition of common cybersecurity threats and vulnerabilities

Target Audience

  • IT security analysts
  • Members of incident response teams
  • Cybersecurity operations specialists

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories