Cyber Incident Response

This course covers cybersecurity incident response planning, tools, and techniques. Students will build a formal incident response handling program. Students use tools to contain, clean up, recover, and prepare a post-incident report. Topics include forensic tools, their appropriate use, and analysis of the symptoms of an incident. The purpose and importance of communication and role-based responsibilities will be integrated throughout the course.

Upon successful completion of this course, you will be able to:

1. Describe the roles and responsibilities of cybersecurity analysts

2. Apply environmental reconnaissance techniques using appropriate tools and processes

3. Analyze the results of a network reconnaissance

4. Given a network-based threat, implement or recommend the appropriate response and countermeasure

5. Explain the purpose of practices used to secure a corporate environment

6. Implement an information security vulnerability management process

7. Configure vulnerability scanning tools and analyze the resulting output

8. Compare and contrast common vulnerabilities found within an organization

9. Describe the major steps associated with a typical penetration testing process

10. Analyze the environment and outline its vulnerability management requirements