Incident Response and Investigation
During this 5-day course you will learn to investigate and evaluate evidence in the same way that NSA analysts do it – starting with a critical thinking, criminology and data analysis, moving through crime scene intelligence and only then proceeding to the technical side of things. We turn security experts into advanced analysts and investigators.
Incident Response and Investigation is about helping decision makers make the right decision. That is what analysts do. They don’t just dive technically into evidence – they need to extract the right information, avoid different kinds of mental traps in coming to conclusions by thinking critically and then be able to present the evidence in a clear, concise and correct way to enable decision makers to make the right move.
Learning Objectives
- Transition from a technical expert to a security analyst and investigator.
- Learn how to collect, handle, analyze and report on evidence.
- Learn how to analyze disk, logs, memory and network artifacts.
- Learn to detect and avoid analysis pitfalls.
- Learn how to investigate people.
- Learn how to analyze malicious files – static and dynamic analysis of malware.
What is the target audience?
- Law enforcement agencies – cyber crime investigation departments, prosecutors, investigators and analysts.
- Corporate defense teams – SOC analysts, digital forensics and incident response teams (when developing a new team or when training new team members).
- Individuals who want to transition from technical experts to computer crime investigation analysts.
This 5-day course has everything to get one started in the science of Digital Forensics and Incident Response.
Course Contents
During this 5-day course you will learn to investigate and evaluate evidence in the same way that NSA analysts do it – starting with critical thinking, criminology and data analysis, moving through crime scene intelligence and only then proceeding to the technical side of things. We turn security experts into advanced analysts and investigators.
Day 1
Day 2
Day 3
Day 4
Day 5
Discounts for volume orders
— 28 February 2018
- We offer discounts for high volume orders If you represent a law enforcement agency and want to train larger number of people in digital forensics and incident response, contact us, we will have a special offer prepared for you.
