Hands-On Incident Response Analysis

Cyber attacks take place every minute of the day around the world. Incident response is an organized approach to addressing and managing the aftermath of a security breach or attack. Responding to any incident rapidly will help your organization minimize losses, mitigate any vulnerabilities, restore services and processes as quickly as possible, and reduce the risk of being attacked in the future. Incident response strategies prepare an organization for the unknown. They comprise a dependable method for detecting a security instance instantly when it occurs, and addressing it effectively.

In this course, you will learn the core principles of hands-on incident response (IR). You will look at the major symptoms, defenses against them, and what to do when an incident happens, along with how to detect incidents in the first place. You will explore the actual workflow steps that every security professional should follow to ensure consistency in your incident identification and resolution approaches. Moving on, you will delve into some more common incidents that could affect your network by reviewing how to handle and respond to issues such as a DoS, a session hijack, or even malicious code. By taking this course, you will be able to differentiate between commodity and Advanced Persistent Threat (APT) attack groups. You will explore how to review alerts, log files, and recognize common character encodings and carrier files.

By the end of this course, you will be ready to take on incident response strategies pre-emptively and confidently, and you'll be able to identify the various (and sometimes subtle) signs that may indicate you've had an incident or one's coming your way.

About the Author

Sunil Gupta is an experienced computer programmer and cybersecurity expert. He consults in information technology with a focus on cybersecurity. He is an invited speaker for, and a member of, many key organizations.

Sunil has helped many organizations around the Globe including Barclays Bank, Aviation College Qatar (QATAR), Ethiopian Airlines, Telecom Authority Tanzania, NCB Bank (Saudi Arabia), Accenture (India), Afghan Wireless (Afghanistan), and many more.

Currently, he teaches online over 50,000 students in more than 170 countries and some of his best work has been published by major publishing houses. Some of his best courses include: End-to-End Penetration Testing with Kali Linux and Threat and Vulnerability Assessment for Enterprises.