EC-Council Certified Incident Handler (ECIH)

Price
$1,799.00

Duration
3 Days

Delivery Methods
Virtual Instructor Led
Private Group

Add Exam Voucher
$250.00

Request More Information

Download Course Details

Course Details Only
Course Details & Schedule

Skip to Class Dates

Course Overview

The EC-Council Certified Incident Handler program is designed to provide the fundamental skills to handle and respond to the computer security incidents in an information system. The course addresses various underlying principles and techniques for detecting and responding to current and emerging computer security threats. Students will learn how to handle various types of incidents, risk assessment methodologies, and various laws and policy related to incident handling.

In addition, the students will learn about computer forensics and its role in handling and responding to incidents. The course also covers incident response teams, incident reporting methods, and incident recovery techniques in detail.

Course Objectives

After attending the course, they will be able to create incident handling and response policies and deal with various types of computer security incidents. The comprehensive training program will make students proficient in handling and responding to various security incidents such as network security incidents, malicious code incidents, and insider attack threats.

Who Should Attend?

E|CIH is a specialist-level program that caters to mid-level to high-level cybersecurity professionals. In order to increase your chances of success, it is recommended that you have at least 1 year of experience in the cybersecurity domain. E|CIH members are ambitious security professionals who work in Fortune 500 organizations globally.

United Training is committed to working as a partner with our clients. Choose United Training and take advantage of the following benefits.

Robust Public Enrollment Schedule. Enjoy access to hundreds of Guaranteed to Run dates across a diverse catalog of course titles.
Private Group Training. Let our world-class instructors come to you to deliver training at your place of business or we can present to your team online using our Virtual Instructor-Led Training platform.
Custom Training Solutions. Our subject matter experts can customize the class to specifically address the unique goals of your team.
Free Re-Takes. Most completed United Training courses carry our unbeatable Learning Guarantee. This guarantee allows students to repeat most United Training courses, if they are the same version, FREE OF CHARGE, within six months of completion of the courses. Exceptions: Cisco, Citrix, VMware, Red Hat, and courses provided by affiliated 3rd party training providers.

Course Prerequisites

There are no prerequisites for this course.

Agenda

1 - Introduction to Incident Response and Handling

Overview of Information Security Concepts
Understanding Information Security Threats and Attack Vectors
Understanding Information Security Incident
Overview of Incident Management
Overview of Vulnerability Management
Overview of Threat Assessment
Understanding Risk Management
Understanding Incident Response Automation and Orchestration
Incident Handling and Response Best Practices
Overview of Standards
Overview of Cybersecurity Frameworks
Importance of Laws in Incident Handling
Incident Handling and Legal Compliance

2 - Incident Handling and Response Process

Overview of Incident Handling and Response (IH&R) Process
Step 1: Preparation for Incident Handling and Response
Step 2: Incident Recording and Assignment
Step 3: Incident Triage
Step 4: Notification
Step 5: Containment
Step 6: Evidence Gathering and Forensics Analysis
Step 7: Eradication
Step 8: Recovery
Step 9: Post-Incident Activities

3 - Forensic Readiness and First Response

Introduction to Computer Forensics
Overview of Forensic Readiness
Overview of First Response
Overview of Digital Evidence
Understanding the Principles of Digital Evidence Collection
Collecting the Evidence
Securing the Evidence
Overview of Data Acquisition
Understanding the Volatile Evidence Collection
Understanding the Static Evidence Collection
Performing Evidence Analysis
Overview of Anti-Forensics

4 - Handling and Responding to Malware Incidents

Overview of Malware Incident Response
Preparation for Handling Malware Incidents
Detecting Malware Incidents
Containment of Malware Incidents
Eradication of Malware Incidents
Recovery after Malware Incidents
Guidelines for Preventing Malware Incidents

5 - Handling and Responding to Email Security Incidents

Overview of Email Security Incidents
Preparation for Handling Email Security Incidents
Detection and Containment of Email Security Incidents
Eradication of Email Security Incidents
Recovery after Email Security Incidents

6 - Handling and Responding to Network Security Incidents

Overview of Network Security Incidents
Preparation for Handling Network Security Incidents
Detection and Validation of Network Security Incidents
Handling Unauthorized Access Incidents
Handling Inappropriate Usage Incidents
Handling Denial-of-Service Incidents
Handling Wireless Network Security Incidents

7 - Handling and Responding to Web Application Security Incidents

Overview of Web Application Incident Handling
Web Application Security Threats and Attacks
Preparation to Handle Web Application Security Incidents
Detecting and Analyzing Web Application Security Incidents
Containment of Web Application Security Incidents
Eradication of Web Application Security Incidents
Recovery from Web Application Security Incidents
Best Practices for Securing Web Applications

8 - Handling and Responding to Cloud Security Incidents

Cloud Computing Concepts
Overview of Handling Cloud Security Incidents
Cloud Security Threats and Attacks
Preparation for Handling Cloud Security Incidents
Detecting and Analyzing Cloud Security Incidents
Containment of Cloud Security Incidents
Eradication of Cloud Security Incidents
Recovering from Cloud Security Incidents
Best Practices Against Cloud-based Incidents

9 - Handling and Responding to Insider Threats

Introduction to Insider Threats
Preparation for Handling Insider Threats
Detecting and Analyzing Insider Threats
Containment of Insider Threats
Eradication of Insider Threats
Recovery after Insider Attacks
Best Practices Against Insider Threats

Upcoming Class Dates and Times

Jul 5, 6, 7
9:00 AM - 5:00 PM

ENROLL $1,799.00

Virtual: - CST

Nov 1, 2, 3
9:00 AM - 5:00 PM