With more and more vital data being entrusted to networked systems, the security of your organization’s computer systems has never been more important. Our experts can teach you how to protect your valuable data, and how to mitigate damage if an incident does occur. Our team is among the world’s leaders in incident response and investigation. Put our experience to work for you.
Advanced Incident Response
This course teaches incident responders how to assess and analyze digital evidence collected from the scene of a network incident. The course is aimed at information technology personnel who may be tasked within their organization with conducting an investigation into a network incident. Emphasis is placed on sound investigative methodologies coupled with advanced analysis techniques. Moving beyond basic incident response, this course will provide the skills needed to evaluate the impact of an incident, develop an appropriate mitigation strategy, and report the findings. The course utilizes a series of scenario-based exercises to provide students with hands on experience in the topics presented.
Specific topics covered include:
- Investigative Methodologies
- Evidence Handling
- Analysis of HTTP, FTP, and Similar Text Logs
- Analysis of Windows Event Logs
- Analysis of IDS, Firewall, and Router Logs
- Evaluating the Impact of an Incident
- Developing an Appropriate Mitigation Strategy
- Reporting your Findings
This five-day, hands-on course prepares information technology professionals to not only respond to incidents, but to thoroughly analyze and appropriately mitigate such occurrences.
back to top
