Overview

This three-course pathway is designed for skilled SOC analysts seeking to join an Incident Response Team and to enable Certification to Certified Incident Handler and Certified Digital Forensics at Cyber Industry standard. The courses teaches how to provide fast effective responses to critical cyber incidents, identifying entry points, positions recorded and how to sign the attack. It will prepare participants to define an incident response plan; perform analysis and detection of malware & cyber-attackers; find anomalies and use big data for SIEM, threat hunting and forensics.

Suitable for

• Technically skilled SOC analysts seeking to join an Incident Response Team

Prerequisites

• Cyber security experience, knowledge of security systems, Windows, Linux & networking

Content

• Virtual Classroom and AWS Lab Environment. Exam upon completion

Skills Taught

• Define an incident response plan
• Analyze emails, files, pdf, rtf for forensics purposes
• Detect, analyze and contain malwares and attackers
• Find anomalies in network traffic
• Investigate Windows and Linux systems
• Use timelines to detect cyber attacks
• Analyze malwares and create IOCs/TTP
• Use big data system for SIEM, Threat hunting and forensics

Course Outlines

• Incident Response
• Data acquisition
• Emails & Office Analysis
• Windows Persistency
• Network Forensics
• Windows/Linux logs
• Lateral Movements
• Final Lab and report