Cyber Security Training | Incident Response Training in Seattle

Incident Response Training Course Outline

Module 1: Threat Landscape and Incident Readiness

• Attacker Motivations
• Attack Methods
• Anatomy of an Attack
• Modern Adversary
• Preparing Process, People, and Technology

Module 2: Remote Triage and Its Tools

• Finding Evil
• Guarding Credentials
• Windows Management Instrumentation Command‐Line Utility
• Forensically Sound Approaches
• PowerShell
• Incident Response Frameworks

Module 3: Acquiring Memory and Disk Imaging

• Order of Volatility
• Local Memory Collection
• Remote Memory Collection
• Live Memory Analysis
• Protecting the Integrity of Evidence
• Dead‐Box Imaging
• Live Imaging
• Imaging Virtual Machines

Module 4: Network Security Monitoring

• Security Onion
• Text‐Based Log Analysis

Module 5: Event Log, Memory, and Malware Analysis

• Understanding Event Logs
• Account‐Related Events
• Object Access
• Auditing System Configuration Changes
• Process Auditing
• Auditing PowerShell Use
• Using PowerShell to Query Event Logs
• Importance of Baselines
• Sources of Memory Data
• Using Volatility and Rekall
• Examining Processes
• Examining Windows Services
• Examining Network Activity
• Detecting Anomalies
• Online Analysis Services
• Static Analysis
• Dynamic Analysis
• Reverse Engineering

Module 6: Disk Forensics and Lateral Movement Analysis

• Forensics Tools
• Time Stamp Analysis
• Link Files and Jump Lists
• Prefetch
• System Resource Usage Monitor
• Registry Analysis
• Browser Activity
• USN Journal
• Volume Shadow Copies
• Automated Triage
• Linux/UNIX System Artefacts
• Server Message Block
• Kerberos Attacks
• PsExec
• Scheduled Tasks
• Service Controller
• Remote Desktop Protocol
• Windows Management Instrumentation
• Windows Remote Management
• PowerShell Remoting
• SSH Tunnels and Other Pivots

Module 7: Continuous Improvement and Proactive Activities

• Validate Mitigation Efforts
• Building On Successes and Learning from Mistakes
• Improving Your Defenses
• Threat Hunting
• Adversary Emulation

Who should attend this Incident Response Training Course?

This Incident Response Training in Seattle prepares individuals and teams to effectively manage and mitigate cybersecurity incidents. This course will benefit the following professionals:

• Cybersecurity Professionals
• Law Enforcement Officers
• Compliance Officers
• Risk Managers
• Legal Professionals
• System Administrators
• Network Engineers

Prerequisites of the Incident Response Training Course

There are no formal prerequisites for this Incident Response Certification Course. However, prior experience in computer systems or related roles is recommended but not mandatory. Also, familiarity with programming might prove to be beneficial for the delegate.
 

Incident Response Training Course Overview

Incident Response Course in Seattle provides a structured approach to managing the aftermath of a security breach or cyberattack. Whether it's a computer incident, an IT incident, or a security incident, Incident Response aims to minimize damage, reduce recovery time and costs, and mitigate future risks. In an era where cyber threats are pervasive, mastering incident response is essential for organizations looking to protect their assets.

Proficiency in Incident Response in Seattle is crucial for professionals in roles such as Incident Responders, Cybersecurity Analysts, and IT Security Managers. Having the skills to respond effectively to security incidents is a career game-changer. Organizations worldwide seek individuals who can swiftly and competently address incidents, making it a highly lucrative skill set in the cybersecurity domain.

The Knowledge Academy's 1-day Incident Response Course in Seattle equips delegates with the knowledge and techniques needed to effectively respond to security incidents. Under the guidance of an experienced trainer, delegates will gain insights into attacker motivations, incident readiness, and the tools required for successful response.

Incident Response Training Course Objectives

• To understand the motivations and tactics of threat actors and attackers
• To prepare individuals, networks, and plans for effective incident response
• To grasp the scope of an incident, assessing the impact on systems and vulnerabilities
• To become proficient in remote triage, including the use of relevant tools
• To learn continuous improvement strategies for incident response
• To proactively prepare for and mitigate cybersecurity incidents

Upon completing this course, delegates in Seattle will possess the knowledge and skills required to identify and respond to security incidents, making them valuable assets in the cybersecurity landscape and opening doors to high-paying positions in international organizations.
 

What’s included in this Incident Response Training Course?

• World-Class Training Sessions from Experienced Instructors
• Incident Response Certificate
• Digital Delegate Pack