Cybersecurity
Intermediate Level
Hands-on Labs
Incident Response - A wholistic approach
A master-level comprehensive 6-week incident response program covering end-to-end cyber crisis management: from live volatile memory acquisition, threat telemetry, and PCAP analysis, to adversary lateral containment, active directory remediation, and executive...
What You'll Learn in This Course
Execute end-to-end Incident Response aligning with NIST SP 800-61 and SANS PICERL frameworks
Apply RFC 3227 Order of Volatility during live forensic triage to prevent evidence contamination
Perform endpoint process triage, uncover hidden backdoors, and inspect live memory injections with Velociraptor & YARA
Analyze network PCAP traces to identify C2 heartbeat beaconing, jitter, and DNS tunneling with Zeek
Detect Active Directory lateral movement (Pass-the-Hash, Kerberoasting) and execute host containment
Author executive post-mortem reports and engineer defensible containment playbooks
Course Syllabus & Curriculum
36 Modules · 216 Lessons
Week 1
Week 1: Incident Response Foundations & Threat Preparedness
Introduction to Incident Response & The SOC Operating Model
35 min
The Modern IR Lifecycle & Threat Landscape
45 min
Building Resilient Incident Response Playbooks & SLAs
40 min
Telemetry Stacks: SIEM, EDR, NDR & Live Endpoint Collectors
45 min
Threat Intelligence Integration & MITRE ATT&CK Mapping in IR
45 min
Week 1 Knowledge Check & Incident Triage Assessment
25 min
Introduction to Incident Response & The SOC Operating Model
35 min
The Modern IR Lifecycle & Threat Landscape
45 min
Building Resilient Incident Response Playbooks & SLAs
40 min
Telemetry Stacks: SIEM, EDR, NDR & Live Endpoint Collectors
45 min
Threat Intelligence Integration & MITRE ATT&CK Mapping in IR
45 min
Week 1 Knowledge Check & Incident Triage Assessment
25 min
Introduction to Incident Response & The SOC Operating Model
35 min
The Modern IR Lifecycle & Threat Landscape
45 min
Building Resilient Incident Response Playbooks & SLAs
40 min
Telemetry Stacks: SIEM, EDR, NDR & Live Endpoint Collectors
45 min
Threat Intelligence Integration & MITRE ATT&CK Mapping in IR
45 min
Week 1 Knowledge Check & Incident Triage Assessment
25 min
Introduction to Incident Response & The SOC Operating Model
35 min
The Modern IR Lifecycle & Threat Landscape
45 min
Building Resilient Incident Response Playbooks & SLAs
40 min
Telemetry Stacks: SIEM, EDR, NDR & Live Endpoint Collectors
45 min
Threat Intelligence Integration & MITRE ATT&CK Mapping in IR
45 min
Week 1 Knowledge Check & Incident Triage Assessment
25 min
Introduction to Incident Response & The SOC Operating Model
35 min
The Modern IR Lifecycle & Threat Landscape
45 min
Building Resilient Incident Response Playbooks & SLAs
40 min
Telemetry Stacks: SIEM, EDR, NDR & Live Endpoint Collectors
45 min
Threat Intelligence Integration & MITRE ATT&CK Mapping in IR
45 min
Week 1 Knowledge Check & Incident Triage Assessment
25 min
Introduction to Incident Response & The SOC Operating Model
35 min
The Modern IR Lifecycle & Threat Landscape
45 min
Building Resilient Incident Response Playbooks & SLAs
40 min
Telemetry Stacks: SIEM, EDR, NDR & Live Endpoint Collectors
45 min
Threat Intelligence Integration & MITRE ATT&CK Mapping in IR
45 min
Week 1 Knowledge Check & Incident Triage Assessment