This website uses cookies. By continuing to browse the site, you agree to this use. For more information, please refer to the Terms of Use.

Syllabus SOC-IR

SOC-IR syllabus 01 / Course Introduction 02 / Cyber Security Basics 03 / Security Actions 04 / Monitoring and Analysis of Common Protocols 05 / Managing Cyber Threats and Vulnerability 06 / Monitoring and Analyzing Hacking Data 07 / Cybersecurity incidents response 08 / Windows & Azure Security Monitoring 09 / SIEM System

07

Cybersecurity incidents response

Incident response process

Response coordination with relevant entities
Factors contributing to data criticality

Incident response procedure

Preparation
Detection and analysis
Containment
Eradication and recovery
post-incident activities

Potential indicators of compromise & Incident Response in action

Network-related
Host-related
Application-related
Real life Incident Response cases