Course information

Incident Response Training Course Outline

Module 1: Threat Landscape and Incident Readiness

  • Attacker Motivations
  • Attack Methods
  • Anatomy of an Attack
  • Modern Adversary
  • Preparing Process, People, and Technology

Module 2: Remote Triage and Its Tools

  • Finding Evil
  • Guarding Credentials
  • Windows Management Instrumentation Command‐Line Utility
  • Forensically Sound Approaches
  • PowerShell
  • Incident Response Frameworks

Module 3: Acquiring Memory and Disk Imaging

  • Order of Volatility
  • Local Memory Collection
  • Remote Memory Collection
  • Live Memory Analysis
  • Protecting the Integrity of Evidence
  • Dead‐Box Imaging
  • Live Imaging
  • Imaging Virtual Machines

Module 4: Network Security Monitoring

  • Security Onion
  • Text‐Based Log Analysis

Module 5: Event Log, Memory, and Malware Analysis

  • Understanding Event Logs
  • Account‐Related Events
  • Object Access
  • Auditing System Configuration Changes
  • Process Auditing
  • Auditing PowerShell Use
  • Using PowerShell to Query Event Logs
  • Importance of Baselines
  • Sources of Memory Data
  • Using Volatility and Rekall
  • Examining Processes
  • Examining Windows Services
  • Examining Network Activity
  • Detecting Anomalies
  • Online Analysis Services
  • Static Analysis
  • Dynamic Analysis
  • Reverse Engineering

Module 6: Disk Forensics and Lateral Movement Analysis

  • Forensics Tools
  • Time Stamp Analysis
  • Link Files and Jump Lists
  • Prefetch
  • System Resource Usage Monitor
  • Registry Analysis
  • Browser Activity
  • USN Journal
  • Volume Shadow Copies
  • Automated Triage
  • Linux/UNIX System Artefacts
  • Server Message Block
  • Kerberos Attacks
  • PsExec
  • Scheduled Tasks
  • Service Controller
  • Remote Desktop Protocol
  • Windows Management Instrumentation
  • Windows Remote Management
  • PowerShell Remoting
  • SSH Tunnels and Other Pivots

Module 7: Continuous Improvement and Proactive Activities

  • Validate Mitigation Efforts
  • Building On Successes and Learning from Mistakes
  • Improving Your Defences
  • Threat Hunting
  • Adversary Emulation

Show moredowndown

Who should attend this Incident Response Training Course?

This Incident Response Course prepares professionals and teams to effectively manage and mitigate cybersecurity incidents. This course can be beneficial for a wide range of professionals, including:

  • Cybersecurity Professionals
  • Law Enforcement Officers
  • Compliance Officers
  • Risk Managers
  • Legal Professionals
  • System Administrators
  • Network Engineers

Prerequisites of the Incident Response Training Course

There are no formal prerequisites for this Incident Response Course. However, prior experience in computer systems or related roles is recommended but not mandatory. Also, familiarity with programming might prove to be beneficial for the delegate.

Incident Response Training Course Overview

Incident Response Course offers decisional clarity on a regulated path, depending on the wake of a security breach or cyber-attack. Computer incidents, IT incidents, or security incidents—all issues can be mitigated with Incident Response, reducing the recovery time and costs, and managing the risk from similar incidents occurring in the future.

 In the evolving era of cyber threats, only those organisations that hone Incident Response are able to safeguard their assets. This is where professionals like Incident Responders, Cybersecurity Analysts, and IT Security Managers come into play. The skills of responding effectively to such security incidents can be a great game changer.

This 1-day training offered by The Knowledge Academy, equips learners with the proficiency to effectively conduct an Incident Response. Since organisations reward individuals for those who can respond promptly and competently, Incident Response skills is one of the most paid skill sets in cybersecurity.

Course Objectives

  • To understand the motivations and tactics of threat actors and attackers
  • To prepare individuals, networks, and plans for effective incident response
  • To grasp the scope of an incident, assessing the impact on systems and vulnerabilities
  • To become proficient in remote triage, including the use of relevant tools
  • To learn continuous improvement strategies for incident response
  • To proactively prepare for and mitigate cybersecurity incidents

After this course, delegates will possess all the relevant knowledge in identification and response to security incidents. This makes them even more valuable assets in the cybersecurity arena and opens up opportunities for high-paying jobs in international organisations.

Show moredowndown

What’s included in this Incident Response Training Course?

  • World-Class Training Sessions from Experienced Instructors
  • Incident Response Certificate
  • Digital Delegate Pack

Why choose us

Our Pretoria venue

Includes..

Free Wi-Fi

To make sure you’re always connected we offer completely free and easy to access wi-fi.

Air conditioned

To keep you comfortable during your course we offer a fully air conditioned environment.

Full IT support

IT support is on hand to sort out any unforseen issues that may arise.

Video equipment

This location has full video conferencing equipment.

Pretoria is one of the three capital cities within South Africa, it has a population of around 740,000 inhabitants. The city is northeast of the city of Johannesburg in the northeast region of South Africa. Pretoria’s main spoken language is Afrikaans as well as Pedi, Tswana, Zulu and English. The city has a large white community with white designated areas.The city of Pretoria has an unemployment rate of around 25.8%.Pretoria has the largest residential universities within South Africa, Tshwane University of Technology offers various diplomas and degrees in vocational courses. The university has around 60,000 enrolled students. Tshwane has two faculties, Science and Arts. 

Show moredown

Address

Protea Hotel Hatfield

1141 Burnett Street

Pretoria

South Africa 

0083

T: +27 800 780004

Ways to take this course

Experience live, interactive learning from home with The Knowledge Academy's Online Instructor-led Cyber Security Training | Incident Response Training in Pretoria. Engage directly with expert instructors, mirroring the classroom schedule for a comprehensive learning journey. Enjoy the convenience of virtual learning without compromising on the quality of interaction.

Unlock your potential with The Knowledge Academy's Cyber Security Training | Incident Response Training in Pretoria, accessible anytime, anywhere on any device. Enjoy 90 days of online course access, extendable upon request, and benefit from the support of our expert trainers. Elevate your skills at your own pace with our Online Self-paced sessions.

Experience the most sought-after learning style with The Knowledge Academy's Cyber Security Training | Incident Response Training in Pretoria. Available in 490+ locations across 190+ countries, our hand-picked Classroom venues offer an invaluable human touch. Immerse yourself in a comprehensive, interactive experience with our expert-led Cyber Security Training | Incident Response Training in Pretoria sessions.

best_trainers

Highly experienced trainers

Boost your skills with our expert trainers, boasting 10+ years of real-world experience, ensuring an engaging and informative training experience

venues

State of the art training venues

We only use the highest standard of learning facilities to make sure your experience is as comfortable and distraction-free as possible

small_classes

Small class sizes

Our Classroom courses with limited class sizes foster discussions and provide a personalised, interactive learning environment

value_for_money

Great value for money

Achieve certification without breaking the bank. Find a lower price elsewhere? We'll match it to guarantee you the best value

Streamline large-scale training requirements with The Knowledge Academy's In-house/Onsite at your business premises. Experience expert-led classroom learning from the comfort of your workplace and engage professional development.

tailored_learning_experience

Tailored learning experience

Leverage benefits offered from a certification that fits your unique business or project needs

budget

Maximise your training budget

Cut unnecessary costs and focus your entire budget on what really matters, the training.

team_building

Team building opportunity

Our offers a unique chance for your team to bond and engage in discussions, enriching the learning experience beyond traditional classroom settings

monitor_progress

Monitor employees progress

The course know-how will help you track and evaluate your employees' progression and performance with relative ease

What our customers are saying

Cyber Security Training | Incident Response Training in Pretoria FAQs

Incident Response is a systematic way of dealing with, execution, and coordination with security breaches, cyberattacks, and any other similar-related threats that happen within the infrastructure of an organisation.
The seven steps in incident response include preparation, where an incident response plan is established; identification, involving the detection of potential security threats; containment, aimed at preventing further damage; eradication, which removes the threat; recovery, restoring systems to normal; lessons learned, analysing the incident to improve future responses; and reporting, documenting the incident and actions taken for review and compliance.
The four types of incident response plans include incident-specific plans that address particular threats like data breaches, business continuity plans to ensure essential operations continue during disruptions, disaster recovery plans to restore IT systems, and crisis communication plans to manage clear communication during incidents.
It entails the lifecycle of incident response, identification of the threats, response strategies, digital forensics, legal considerations, and post-recovery techniques.
The duration of the course spans 1 day.
While not always mandatory, coding skills can be beneficial for Incident Responders for creating scripts, understanding attack vectors, and automating parts of the response process.
After completing this course, you will gain skills in threat detection, incident management, risk assessment, and mitigation strategies, enabling you to effectively handle and respond to security breaches.
Incident Responders usually arm themselves with a strong foundation in Information Technology or security, an Incident Response Certification, and practical experiences in security for networks and other areas.
Before beginning the course, learners ought to be familiar with basic cybersecurity concepts, such as network architectures, programming, and systems administration.
This training offers benefits in the form of special knowledge on how to handle cyber threats, better career prospects, and uniting with a community that is known for standing up for cybersecurity defence.
This course is ideal for IT Professionals, Security Analysts, System Administrators, Cybersecurity Specialists, and Managers responsible for handling security incidents. Additionally, individuals involved in risk management, compliance, and business continuity planning would benefit from attending these courses.
There are no formal prerequisites for this training.
Yes, Incident Response is in high demand due to the increasing number of cyber threats and security breaches.
The training includes a comprehensive curriculum, a digital delegate pack, a certificate of completion, and access to online resources and community forums.
Industries that need Incident Responders include finance, healthcare, technology, and government. These sectors handle sensitive data and are prime targets for cyber-attacks, necessitating robust incident response teams.
The Knowledge Academy stands out as a prestigious training provider known for its extensive course offerings, expert instructors, adaptable learning formats, and industry recognition. It's a dependable option for those seeking this course.
Incident Response Certification aims to equip professionals with the skills and knowledge to effectively detect, manage, and respond to security incidents. It focuses on minimising damage, ensuring swift recovery, and enhancing the overall security posture of an organisation through structured response strategies.
Yes, The Knowledge Academy offers 24/7 support via phone & email before attending, during, and after the course. Our customer support team is available to assist and promptly resolve any issues you may encounter.
The difficulty level of Incident Response Course varies depending on the course. Some are designed for beginners with no prior experience, while others are more advanced, catering to IT professionals and cybersecurity experts who require in-depth technical knowledge and hands-on experience.
Holding this certification demonstrates a professional's expertise in handling cybersecurity threats and responding effectively to security incidents. It enhances career prospects by validating critical skills in incident management, boosts an organisation's ability to mitigate risks, and strengthens overall cybersecurity resilience.
Taking Incident Response Online Training Courses allows you to gain essential skills to identify and respond to security threats efficiently. These courses offer flexibility in learning, up-to-date knowledge on emerging cyber threats, and enhance your career prospects in cybersecurity by equipping you with industry-recognised expertise.
Individuals or roles that require this training include IT professionals, cybersecurity analysts, system administrators, network security engineers, and incident response team members. Additionally, managers overseeing security operations and those involved in risk management or business continuity also benefit from this training.
Yes, we provide corporate training for this course, tailored to fit your organisation’s requirements.
After completing the certification training, you can apply your skills in real-world scenarios by leading or joining an incident response team. You may also pursue advanced certifications, enhance your career opportunities in cybersecurity, or implement improved security measures within your organisation to safeguard against threats.
The Knowledge Academy provides flexible self-paced training for this course. Self-paced training is beneficial for individuals who have an independent learning style and wish to study at their own pace and convenience.
If you are unable to access your certification course, contact the support team at The Knowledge Academy via their customer service email or phone number provided on their website for prompt assistance and resolution of your issue.
Based on training, you can expect jobs such as Incident Response Analyst, Cybersecurity Specialist, Security Operations Centre (SOC) Analyst, Incident Response Manager, IT Security Consultant, or Digital Forensics Analyst. These roles focus on identifying, managing, and mitigating cyber threats to protect organisations.
The training fees for Incident Response Trainingin Pretoria starts from R33495
The Knowledge Academy is the Leading global training provider for Incident Response Training.
Show more down

Why choose us

icon

Best price in the industry

You won't find better value in the marketplace. If you do find a lower price, we will beat it.

icon

Many delivery methods

Flexible delivery methods are available depending on your learning style.

icon

High quality resources

Resources are included for a comprehensive learning experience.

barclays Logo
deloitte Logo
Thames Water Logo

"Really good course and well organised. Trainer was great with a sense of humour - his experience allowed a free flowing course, structured to help you gain as much information & relevant experience whilst helping prepare you for the exam"

Joshua Davies, Thames Water

santander logo
bmw Logo
Google Logo

Looking for more information on Cyber Security Training?

backBack to course information

Get a custom course package

We may not have any package deals available including this course. If you enquire or give us a call on +27 800 780004 and speak to our training experts, we should be able to help you with your requirements.

cross

BIGGEST
BLACK FRIDAY SALE!

red-starWHO WILL BE FUNDING THE COURSE?

close

close

Thank you for your enquiry!

One of our training experts will be in touch shortly to go over your training requirements.

close

close

Press esc to close

close close

Back to course information

Thank you for your enquiry!

One of our training experts will be in touch shortly to go overy your training requirements.

close close

Thank you for your enquiry!

One of our training experts will be in touch shortly to go over your training requirements.