← Back to courses
Cybersecurity
Incident Response Basics
Two days on what to do in the first hours of a breach
A two-day classroom workshop on the incident response and management domain of CompTIA's CySA+ outline (CS0-004), with the security operations and incident response domain of the ISC2 CC outline. The class works through a simulated incident from first alert to written report. It covers part of those outlines and prepares for no exam on its own.
5Modules
BeginnerLevel
2 daysDuration
COURSE THUMBNAIL
What you will be able to do
Name the stages of incident response
Decide the first actions when an incident is found
Write a short incident report
Course outline
01
What counts as an incident
02
Preparing: roles and a response plan
03
Detecting and analysing
04
Containing, removing and recovering
05
Reporting and lessons learned
Tools you will use
Case studiesLog samples
What you need
Basic understanding of computers and networks
