Overview
This course is designed to prepare security professionals to respond to cybersecurity incidents. The course covers the entire incident response lifecycle, from preparation to post-incident analysis. It provides a structured framework for incident response, including procedures for detecting and responding to security incidents, identifying the root cause of incidents, and implementing corrective actions to prevent future incidents.
What you will learn?
Introduction to Incident Response
- What is Incident Response?
- How and When do we respond?
- The Incident Response Process
Acquiring Incident Evidence
- Imaging
- Live Response Analysis
Introduction to Windows Evidence
- Network Connections
- Browser History - velociraptor
- Prefetch Files - velociraptor
- File System Analysis
- The Registry - velociraptor
- Events and Logs
Analyzing Memory Captures
- Overview
- Acquire Evidence from Memory
- Analyze Acquired Raw Images
Persistence Mechanism
- Common Persistence Mechanism
- Alternative Persistence Mechanism
Investigating Lateral Movement
- Reconnaissance
- Windows Credentials
- Remote Command Execution
- Logon Events
- Interactive Session Artifacts
Introduction to Hunting
- Introduction
- Hunting Examples
Investigating Web Attacks
- Introduction to Web Logs
- Investigating Common Web Attacks
- Obfuscation and Encoding
- Log Analysis Techniques
Why Do You Need This Course?
- This course enables you to acquire analytical skills that are essential for people who work in SoC, Incident Response, and Threat Hunting.
- Cyber threats are constantly evolving, and organizations must be proactive in identifying and responding to them. This course can provide individuals with the knowledge and skills needed to respond effectively to these threats.
- This course can help individuals and organizations enhance their cybersecurity posture by providing them with the tools and techniques needed to respond to threats and protect the valuable data of the organization.
- CyberTalents Incident Response course can help individuals develop the skills needed to protect organizations from cyber threats, comply with regulations, and advance their careers in the cybersecurity field.
Why Our Courses Differ?
Unique Content
Providing the needed knowledge that enables the participant to get started in the field.
Hands-On Labs
Simulation Labs available 24/7 in a cloud-based enviroment using different challenges vary from basic to advanced level.
CTF Evaluation
Running CTF competition, cyber drills and exercises during and after the course.
Gamification
Participants compete together to solve the challenge and apply what they have learned and winner ranks #1 on the leaderboard.