Cyber Security Training | Incident Response Training in Gatwick

Incident Response Training Course Outline

Module 1: Threat Landscape and Incident Readiness

• Attacker Motivations
• Attack Methods
• Anatomy of an Attack
• Modern Adversary
• Preparing Process
• Preparing People
• Preparing Technology

Module 2: Remote Triage and Its Tools

• Finding Evil
• Guarding Credentials
• Windows Management Instrumentation Command‐Line Utility
• Forensically Sound Approaches
• PowerShell
• Incident Response Frameworks

Module 3: Acquiring Memory and Disk Imaging

• Order of Volatility
• Local Memory Collection
• Remote Memory Collection
• Live Memory Analysis
• Protecting the Integrity of Evidence
• Dead‐Box Imaging
• Live Imaging
• Imaging Virtual Machines

Module 4: Network Security Monitoring

• Security Onion
• Text‐Based Log Analysis

Module 5: Event Log, Memory, and Malware Analysis

• Understanding Event Logs
• Account‐Related Events
• Object Access
• Auditing System Configuration Changes
• Process Auditing
• Auditing PowerShell Use
• Using PowerShell to Query Event Logs
• Importance of Baselines
• Sources of Memory Data
• Using Volatility and Rekall
• Examining Processes
• Examining Windows Services
• Examining Network Activity
• Detecting Anomalies
• Online Analysis Services
• Reverse Engineering

Module 6: Disk Forensics and Lateral Movement Analysis

• Forensics Tools
• Time Stamp Analysis and Registry Analysis
• Link Files and Jump Lists
• Prefetch
• System Resource Usage Monitor
• Browser Activity and USN Journal
• Volume Shadow Copies
• Automated Triage
• Linux/UNIX System Artefacts
• Server Message Block
• Kerberos Attacks
• PsExec
• Scheduled Tasks
• Service Controller
• Remote Desktop Protocol
• Windows Management Instrumentation
• Windows Remote Management
• SSH Tunnels and Other Pivots

Module 7: Continuous Improvement and Proactive Activities

• Document
• Validate Mitigation Efforts
• Building On Your Successes and Learning from Your Mistakes
• Improving Your Defences
• Threat Hunting
• Adversary Emulation

Who Should Attend this Incident Response Training?

This Cyber Security Training is ideal for professionals aiming to develop critical skills in identifying, managing, and responding to cybersecurity incidents effectively.

You should attend this Incident Response Training if you are:

• Cybersecurity Professional: Handling incident detection, analysis, and response 
• IT Security Specialist: Managing breaches, vulnerabilities, and cyber threats 
• Risk and Compliance Officer: Ensuring regulatory compliance during Incident Management 
• Security Operations Centre (SOC) Analyst: Responding to real-time security alerts and incidents 
• Network Administrator: Protecting infrastructure against intrusions and cyberattacks 
• Aspiring Incident Responder: Preparing for specialised roles in Cyber Incident Management 

Prerequisites for the Incident Response Training

There are no formal prerequisites for this Incident Response Training Course. However, a basic understanding of computer systems, networks, or cyber security concepts will be beneficial for delegates.

Incident Response Training Overview

Incident Response Training helps delegates understand how to detect, investigate, and respond to cyber security incidents effectively. It covers key response activities, including triage, evidence handling, forensic analysis, and recovery planning.

Delegates develop skills in identifying security incidents, conducting investigations, handling digital evidence, and implementing structured response procedures. They learn how to minimise the impact of cyber incidents and support organisational resilience.

This 1-Day course by The Knowledge Academy enables delegates to apply incident response techniques in cyber security and incident management environments. Delegates can investigate security incidents and implement effective incident response strategies.

Incident Response Training Course Objectives

• To detect, analyse, and investigate cyber security incidents
• To develop and implement effective incident response plans
• To apply forensic techniques for evidence handling and analysis
• To support recovery and post-incident improvement activities
• To improve threat hunting and proactive incident response capabilities
• To strengthen organisational resilience against cyber threats

Upon completion, delegates will be able to manage cyber security incidents confidently, protect critical assets, and apply structured response practices to improve organisational resilience. They will also be able to support investigations, reduce incident impact, and strengthen future security readiness.

What’s Included in this Incident Response Training Course?

• World-Class Training Sessions from Experienced Instructors
• Incident Response Certificate
• Digital Delegate Pack