With more and more vital data being entrusted to networked systems, the security of your organization’s computer systems has never been more important. Our experts can teach you how to protect your valuable data, and how to mitigate damage if an incident does occur. Our team is among the world’s leaders in incident response and investigation. Put our experience to work for you.
Basic Incident Response
This is a basic course on the proper methodology to be followed when responding to a network related incident. The course is designed for information technology staff that may be tasked as first responders in the event of a network incident. Emphasis is placed on identifying and collecting digital evidence from a network after an incident has occurred. Sources of potential evidence such as intrusion detection systems, firewalls, routers, log aggregators, remote access points, host computers and others will be examined in detail. The attendee will learn to collect digital evidence in a manner that protects its integrity for any possible legal proceedings, and to protect and preserve this evidence by establishing and maintaining a chain of custody. A series of white board and hands-on exercises will be used to demonstrate and reinforce the topics presented.
Topics covered include:
- Initial Triage of the Incident
- Establishing a Response and Collection Strategy
- Identifying Sources of Evidence
- Collecting Digital Evidence in a Forensically Sound Manner
- Establishing and Maintaining a Chain of Custody
- Interviewing Key Personnel
This three-day, hands-on course provides information technology professionals with the skills required to serve as first responders during any type of network incident.
back to top
