Incident Response

Incident response covers the process of preparing for, investigating, containing, and recovering from cybersecurity incidents.

Topics

• Incident Response Process — Preparation, detection, containment, eradication, recovery, and lessons learned.
• Digital Forensics — Evidence handling, file systems, memory, logs, and forensic investigation basics.
• Data Exfiltration Detection — Identifying suspicious data movement, staging, and outbound transfer patterns.