← Back to courses
Cybersecurity

Incident Response Basics

Two days on what to do in the first hours of a breach

A two-day classroom workshop on the incident response and management domain of CompTIA's CySA+ outline (CS0-004), with the security operations and incident response domain of the ISC2 CC outline. The class works through a simulated incident from first alert to written report. It covers part of those outlines and prepares for no exam on its own.

5Modules
BeginnerLevel
2 daysDuration
COURSE THUMBNAIL

What you will be able to do

Name the stages of incident response
Decide the first actions when an incident is found
Write a short incident report

Course outline

01
What counts as an incident
02
Preparing: roles and a response plan
03
Detecting and analysing
04
Containing, removing and recovering
05
Reporting and lessons learned

Tools you will use

Case studiesLog samples

What you need

Basic understanding of computers and networks

Related courses