ECIH: Certified Incident Handler v3 – eLearning
Develop practical skills in cybersecurity incident handling and response. The course covers the complete incident handling process, from preparing and planning for incidents to detecting, responding to and recovering from security incidents.
Order e-learning course here
The ECIH course provides a structured approach to incident handling and response and is designed for cybersecurity professionals who want to develop the skills needed to manage security incidents effectively.
You will learn how to identify and respond to different types of incidents, including malware attacks, email security incidents, network attacks, web application incidents, cloud security incidents and insider threats. The course also introduces vulnerability management, threat assessment, risk management, computer forensics and forensic readiness.
A strong focus is placed on practical incident response. Through hands on labs and exercises, you will work with techniques for evidence collection and analysis, first response procedures and methods for reducing the impact of security incidents.
What will you get out of the course?
After completing the course, you will be able to:
- Understand key challenges within information security
- Identify different cybersecurity threats, attack vectors and threat actors
- Understand the fundamentals of incident management
- Apply incident handling and response processes
- Understand vulnerability management, threat assessment and risk management
- Work with incident response automation and orchestration
- Apply relevant incident handling standards, frameworks and best practices
- Plan an incident handling and response programme
- Understand computer forensics and forensic readiness
- Apply first response procedures
- Collect, preserve and analyse digital evidence
- Understand anti forensics techniques used by attackers
- Respond systematically to different types of cybersecurity incidents
Who is this course for?
The course is suitable for:
- Penetration testers
- Vulnerability assessment auditors
- Risk assessment administrators
- Network administrators
- Application security engineers
- Cyber forensic investigators and analysts
- SOC analysts
- System administrators and engineers
- Firewall administrators
- Network managers and IT managers
- Cybersecurity professionals involved in incident handling and response
Prerequisites
ECIH is a specialist level course intended for professionals with existing cybersecurity knowledge.
At least one year of experience within cybersecurity is recommended to increase your chances of successfully completing the course.
Course content
The course covers:
- Introduction to Incident Handling and Response
- Incident Handling and Response Process
- Forensic Readiness and First Response
- Handling and Responding to Malware Incidents
- Handling and Responding to Email Security Incidents
- Handling and Responding to Network Security Incidents
- Handling and Responding to Web Application Security Incidents
- Handling and Responding to Cloud Security Incidents
- Handling and Responding to Insider Threats
