Overview

The Certified Incident Handler (ECIH) training and certification boot camp provides fundamental skills for handling and responding to computer security incidents. It covers principles and techniques for detecting and responding to current and emerging threats. Students will learn how to handle various incidents, risk assessment methodologies, and laws and policies related to incident handling. The course prepares students to create incident handling and response policies and deal with various types of security incidents, including network security, malicious code incidents, and insider threats.

Duration

2 Days (16 Hours)

Intended Audience

  • Incident Handlers
  • Risk Assessment Administrators
  • Penetration Testers
  • Cyber Forensic Investigators
  • Vulnerability Assessment Auditors
  • System Administrators
  • System Engineers
  • Firewall Administrators
  • Network Managers
  • IT Managers
  • IT Professionals

Prerequisites

  • Prior networking foundation

Course Outlines

  1. Introduction to Incident Response and Handling
  2. Risk Assessment
  3. Incident Response and Handling Steps
  4. CSIRT
  5. Handling Network Security Incident
  6. Handling Malicious Code Incidents
  7. Handling Insider Threats
  8. Forensic Analysis and Incident Response
  9. Incident Reporting
  10. Incident Recovery
  11. Security Policies and Laws

This comprehensive training will equip students with hands-on understanding and experience in Incident Handling, preparing them for the EC-Council Certified Incident Handler exam 212-89.