Directory

4 day highly practical course designed to equip information security specialists with the knowledge and skills to deal effectively with incident response situations. It also gives investigators valuable insight into forensic acquisition under difficult circumstances. Delegates will be guided through a real-world style scenario featuring extensive “hands-on” learning throughout.

Delegates who successfully complete the exam included at the end of the training course will be awarded the Certified Security Incident Specialist (CSIS) qualification.  Some of the course highlights include:

• The purpose of an incident investigation
• The most up-to-date methodologies for incident investigations
• State-of-the-art virtual classroom environment
• Identification of key server forensics artefacts
• External Scanning, Internal Scanning and forensic acquisition – in the context of an investigation scenario
• Live acquisition of Windows and Linux servers across the network
• Exploration of the ‘Data Analysis’ process
• Analysis of Logs, Source Code, Database, Systems and Users
• Simulation of ‘Incident Containment’