ECIH – Certified Incident Handler – Trainstem Computer Training Center in Doha, Qatar

Featured

ECIH – Certified Incident Handler

Instructor

admin

Curriculum 0 Items

Reviews

( 0 Reviews )

Overview

The latest revision of EC-Council’s Certified Incident Handler (E|CIH) certified program has been designed and developed in collaboration with cybersecurity and incident handling/response practitioners across the globe.

The ECIH program focuses on a structured approach to the incident handling and response (IH&R) process. This IH&R process includes stages such as; incident handling and response preparation, incident validation and prioritization, incident escalation and notification, forensic evidence gathering and analysis, incident containment, systems recovery, and incident eradication. This systematic incident handling and response process creates awareness among the incident responders in knowing how to respond to various types of security incidents happening in organisations today. The types of cybersecurity incidents covered include malware incidents, email security incidents, network security incidents, web application security incidents, cloud security incidents, and insider threat-related incidents.

It is a comprehensive specialist level program that imparts knowledge and skills on how organisations can effectively handle post breach consequences by reducing the impact of the incident, both financially and reputational. The learning objectives are emphasised through practical learning with 40% of this course covering hands-on experience of the latest incident handling and response tools, techniques, methodologies, frameworks, etc.

Course Content

Introduction to Incident Handling and Response

Overview of Information Security Concepts
Understanding Information Security Threats and Attack Vectors
Understanding Information Security Incident
Overview of Incident Management
Overview of Vulnerability Management
Overview of Threat Assessment
Understanding Risk Management
Understanding Incident Response Automation and Orchestration
Incident Handling and Response Best Practices
Overview of Standards
Overview of Cybersecurity Frameworks
Importance of Laws in Incident Handling
Incident Handling and Legal Compliance

Incident Handling and Response Process

Overview of Incident Handling and Response (IH&R) Process
Step 1: Preparation for Incident Handling and Response
Step 2: Incident Recording and Assignment
Step 3: Incident Triage
Step 4: Notification
Step 5: Containment
Step 6: Evidence Gathering and Forensics Analysis
Step 7: Eradication
Step 8: Recovery
Step 9: Post-Incident Activities

Forensic Readiness and First Response

Introduction to Computer Forensics
Overview of Forensic Readiness
Overview of First Response
Overview of Digital Evidence
Understanding the Principles of Digital Evidence Collection
Collecting the Evidence
Securing the Evidence
Overview of Data Acquisition
Understanding the Volatile Evidence Collection
Understanding the Static Evidence Collection
Performing Evidence Analysis
Overview of Anti-Forensics

Handling and Response to Malware Incidents

Overview of Malware Incident Response
Preparation for Handling Malware Incidents
Detecting Malware Incidents
Containment of Malware Incidents
Eradication of Malware Incidents
Recovery after Malware Incidents
Guidelines for Preventing Malware Incidents

Handling and Responding to Email Security Incidents

Overview of Email Security Incidents
Preparation for Handling Email Security Incidents
Detection and Containment of Email Security Incidents
Eradication of Email Security Incidents
Recovery after Email Security Incidents

Handling and Responding to Network Security Incidents

Overview of Network Security Incidents
Preparation for Handling Network Security Incidents
Detection and Validation of Network Security Incidents
Handling Unauthorized Access Incidents
Handling Inappropriate Usage Incidents
Handling Denial-of-Service Incidents
Handling Wireless Network Security Incidents

Handling and Responding to Web Application Security Incidents

Overview of Web Application Incident Handling
Web Application Security Threats and Attacks
Preparation to Handle Web Application Security Incidents
Detecting and Analyzing Web Application Security Incidents
Containment of Web Application Security Incidents
Eradication of Web Application Security Incidents
Recovery from Web Application Security Incidents
Best Practices for Securing Web Applications

Handling and Responding to Cloud Security Incidents

Cloud Computing Concepts
Overview of Handling Cloud Security Incidents
Cloud Security Threats and Attacks
Preparation for Handling Cloud Security Incidents
Detecting and Analyzing Cloud Security Incidents
Containment of Cloud Security Incidents
Eradication of Cloud Security Incidents
Recovering from Cloud Security Incidents
Best Practices Against Cloud-based Incidents

Handling and Responding to Insider Threats

Introduction to Insider Threats
Preparation for Handling Insider Threats
Detecting and Analyzing Insider Threats
Containment of Insider Threats
Eradication of Insider Threats
Recovery after Insider Attacks
Best Practices Against Insider Threats

Target Audience

This course will significantly benefit incident handlers, risk assessment administrators, penetration testers, cyber forensic investigators, venerability assessment auditors, system administrators, system engineers, firewall administrators, network managers, IT managers, IT professionals and anyone who is interested in incident handling and response.