Incident Response: Containment, Eradication and Recovery from Pluralsight

Walking into an incident response situation can be intimidating. This course will teach you how to leverage the information gained from network and host analysis to limit the impact of the incident, and root out an attacker from your environment.

In an incident response scenario, it’s hard to know where to start. In this course, Incident Response: Detection and Analysis, you’ll learn to how to accomplish the first phase of an incident response scenario, the initial detection and analysis. First, you’ll validate and confirm that a reported event is, indeed, a security incident. Next, you’ll collect initial triage data used for developing IOC detections. Finally, you’ll learn how to assess and gather network event and host data for deeper analysis. When you’re finished with this course, you’ll have answered some initial, and critical, questions around the event, as well as come up with a lot more based on the collected triage data collected, and be able to move into the next phase of incident response.

What's inside

Syllabus

Root Cause and Scope

Network Segmentation

Eradication of Malicious Files

Recovery

Lessons Learned

New Module

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

This course is ideal for cybersecurity professionals responsible for incident response

Teaches how to detect and analyze security incidents to minimize impact and eradicate attackers from the environment

Provides a solid foundation for beginners in incident response

Covers initial detection and analysis, including validating events, collecting triage data, and assessing network and host data

Career center

Learners who complete Incident Response: Containment, Eradication and Recovery will develop knowledge and skills that may be useful to these careers:

Incident Responder

Incident Responders work with information gained from network and host analysis to limit the impact of security incidents and to root out attackers from their environments. In order to do this, they first validate and confirm that a reported event is, in fact, a security incident. Next, they collect initial triage data used for developing IOC detections. Finally, they assess and gather network event and host data for deeper analysis. This course will help train you on all of these methods.

See salaries and explore the career path for Incident Responder

Forensic Analyst

Forensic Analysts collect, analyze, and document digital artifacts as part of an incident response investigation. They also bring networks and systems back online after a breach. This course can help build a foundation for a career as a Forensic Analyst by teaching you how to identify and collect digital artifacts, and how to analyze them to determine the cause of a security incident.

See salaries and explore the career path for Forensic Analyst

Security Analyst

Security Analysts are responsible for monitoring and analyzing security events, and for taking action to mitigate threats. They also develop and implement security policies and procedures. This course can help build a foundation for a career as a Security Analyst by teaching you how to identify and analyze security events, and how to develop and implement security policies and procedures.

See salaries and explore the career path for Security Analyst

Penetration Tester

Penetration Testers are responsible for identifying and exploiting vulnerabilities in networks and systems. They also provide recommendations for remediation. This course can help build a foundation for a career as a Penetration Tester by teaching you how to identify and exploit vulnerabilities in networks and systems.

See salaries and explore the career path for Penetration Tester

Malware Analyst

Malware Analysts are responsible for analyzing malware to determine its purpose and how to mitigate its effects. They also develop and implement malware detection and prevention strategies. This course can help build a foundation for a career as a Malware Analyst by teaching you how to analyze malware and how to develop and implement malware detection and prevention strategies.

See salaries and explore the career path for Malware Analyst

Risk Analyst

Risk Analysts are responsible for identifying, assessing, and mitigating risks to an organization. They also develop and implement risk management strategies. This course can help build a foundation for a career as a Risk Analyst by teaching you how to identify, assess, and mitigate risks to an organization.

See salaries and explore the career path for Risk Analyst

Security Engineer

Security Engineers are responsible for designing, implementing, and maintaining security systems. They also develop and implement security policies and procedures. This course can help build a foundation for a career as a Security Engineer by teaching you how to design, implement, and maintain security systems.

See salaries and explore the career path for Security Engineer

Network Engineer

Network Engineers are responsible for designing, implementing, and maintaining networks. They also develop and implement network security policies and procedures. This course can help build a foundation for a career as a Network Engineer by teaching you how to design, implement, and maintain networks.

See salaries and explore the career path for Network Engineer

Systems Administrator

Systems Administrators are responsible for managing and maintaining computer systems. They also develop and implement security policies and procedures. This course can help build a foundation for a career as a Systems Administrator by teaching you how to manage and maintain computer systems.

See salaries and explore the career path for Systems Administrator

Database Administrator

Database Administrators are responsible for managing and maintaining databases. They also develop and implement security policies and procedures. This course can help build a foundation for a career as a Database Administrator by teaching you how to manage and maintain databases.

See salaries and explore the career path for Database Administrator

Chief Executive Officer (CEO)

CEOs are responsible for the overall management and operation of an organization. They also set the organization's strategic direction. This course may be useful for CEOs who want to learn more about incident response.

See salaries and explore the career path for Chief Executive Officer (CEO)

Software Developer

Software Developers are responsible for designing, developing, and implementing software. They also develop and implement security policies and procedures. This course may be useful for Software Developers who want to learn more about incident response.

See salaries and explore the career path for Software Developer

Chief Technology Officer (CTO)

CTOs are responsible for developing and implementing an organization's technology strategy. They also oversee the organization's IT department. This course may be useful for CTOs who want to learn more about incident response.

See salaries and explore the career path for Chief Technology Officer (CTO)

Chief Information Security Officer (CISO)

CISOs are responsible for developing and implementing an organization's information security strategy. They also oversee the organization's incident response program. This course may be useful for CISOs who want to learn more about incident response.

See salaries and explore the career path for Chief Information Security Officer (CISO)

IT Manager

IT Managers are responsible for managing and overseeing IT departments. They also develop and implement IT policies and procedures. This course may be useful for IT Managers who want to learn more about incident response.

See salaries and explore the career path for IT Manager