Incident Response and Digital Forensics

Course content

1. 1The incident response life cycleComing
2. 2Preparation: plans, playbooks and teamsComing
3. 3Detection and analysisComing
4. 4Containment strategiesComing
5. 5Eradication and recoveryComing
6. 6Ransomware responseComing
7. 7Business email compromise responseComing
8. 8Digital forensics principles and chain of custodyComing
9. 9Disk and memory evidenceComing
10. 10Log and timeline analysisComing
11. 11Notifying regulators and people affected: breach notification laws in the USComing
12. 12Capstone: lessons learned from an incidentComing

Requirements

• CYB-210 Security Operations Center Analysis

Recommended background. You can start any course at any time.

Description

Preparing for, detecting, containing and recovering from security incidents, and collecting digital evidence properly.

Part of the Information Technology stream, typically taken in year 2.