Incident Response Training - Hong Kong

Incident Response Training Course Outline

Module 1: Threat Landscape and Incident Readiness

• Attacker Motivations
• Attack Methods
• Anatomy of an Attack
• Modern Adversary
• Preparing Process
• Preparing People
• Preparing Technology

Module 2: Remote Triage and Its Tools

• Finding Evil
• Guarding Credentials
• Windows Management Instrumentation Command‐Line Utility
• Forensically Sound Approaches
• PowerShell
• Incident Response Frameworks

Module 3: Acquiring Memory and Disk Imaging

• Order of Volatility
• Local Memory Collection
• Remote Memory Collection
• Live Memory Analysis
• Protecting the Integrity of Evidence
• Dead‐Box Imaging
• Live Imaging
• Imaging Virtual Machines

Module 4: Network Security Monitoring

• Security Onion
• Text‐Based Log Analysis

Module 5: Event Log, Memory, and Malware Analysis

• Understanding Event Logs
• Account‐Related Events
• Object Access
• Auditing System Configuration Changes
• Process Auditing
• Auditing PowerShell Use
• Using PowerShell to Query Event Logs
• Importance of Baselines
• Sources of Memory Data
• Using Volatility and Rekall
• Examining Processes
• Examining Windows Services
• Examining Network Activity
• Detecting Anomalies
• Online Analysis Services
• Reverse Engineering

Module 6: Disk Forensics and Lateral Movement Analysis

• Forensics Tools
• Time Stamp Analysis and Registry Analysis
• Link Files and Jump Lists
• Prefetch
• System Resource Usage Monitor
• Browser Activity and USN Journal
• Volume Shadow Copies
• Automated Triage
• Linux/UNIX System Artefacts
• Server Message Block
• Kerberos Attacks
• PsExec
• Scheduled Tasks
• Service Controller
• Remote Desktop Protocol
• Windows Management Instrumentation
• Windows Remote Management
• SSH Tunnels and Other Pivots

Module 7: Continuous Improvement and Proactive Activities

• Document
• Validate Mitigation Efforts
• Building On Your Successes and Learning from Your Mistakes
• Improving Your Defences
• Threat Hunting
• Adversary Emulation

Who Should Attend this Incident Response Training Course?

This Cyber Security Training is ideal for professionals aiming to develop critical skills in identifying, managing, and responding to cybersecurity incidents effectively.

You should attend this Incident Response Training if you are:

• Cybersecurity Professional: Handling incident detection, analysis, and response 
• IT Security Specialist: Managing breaches, vulnerabilities, and cyber threats 
• Risk and Compliance Officer: Ensuring regulatory compliance during Incident Management 
• Security Operations Centre (SOC) Analyst: Responding to real-time security alerts and incidents 
• Network Administrator: Protecting infrastructure against intrusions and cyberattacks 
• Aspiring Incident Responder: Preparing for specialised roles in Cyber Incident Management 

Prerequisites for the Incident Response Training Course

There are no formal prerequisites for this Incident Response Course. However, prior experience in computer systems or related roles is recommended but not mandatory. Also, familiarity with programming might prove to be beneficial for the delegate.

Incident Response Training Course Overview

Incident Response Training prepares delegates to identify, manage, and respond effectively to cyber security incidents. It covers essential stages of incident handling to limit damage and disruption.

This training improves delegates readiness and ability to implement structured response practices. It develops skills to act swiftly and reduce organisational impact during incidents.

This 1-Day course offered by The Knowledge Academy equips delegates with practical knowledge to manage incidents confidently. It supports informed decision-making and strengthens overall security response capabilities.

Incident Response Training Course Objectives

• To detect and analyse cybersecurity incidents
• To develop and implement an incident response plan
• To coordinate recovery and post-incident activities
• To ensure compliance with regulatory and organisational standards

This comprehensive Incident Response Training provides delegates with the knowledge and skills to manage cybersecurity incidents confidently. It equips professionals to protect critical assets, improve organisational resilience, and respond to threats effectively.

What’s Included in this Incident Response Training Course?

• World-Class Training Sessions from Experienced Instructors
• Incident Response Certificate
• Digital Delegate Pack