Learn the investigation, then prove it.
Learn to lead an investigation from first alert to full recovery. Then prove you can do it on your own, on the clock, in the Cover6 IR Challenge. $599 includes both.
Who it’s for
SOC analysts ready to lead an investigation, not just triage alerts. Before you start the course, complete SOC Analyst Prep Labs or bring equivalent SOC experience.
What’s included
- Incident Response: Lead the Investigation From Alert to Recovery. 13 topics with hands-on Splunk labs, a graded capstone and a final assessment. You triage, scope, contain and eradicate an intrusion, then write the incident report. Lab access runs 365 days from enrollment, and the course is yours for life. Earn the SOC Analyst Level III certificate with 22.5 CPE hours, verifiable at cover6solutions.com/verify.
- Cover6 IR Challenge. One of 12 seeded incidents in Splunk on a 72-hour clock: 60 questions, an incident report with two detections and an after-action review, and a 30-minute written defense, scored against a published rubric. One attempt and one retake are included. Pass and you earn a certificate with 10 CPE hours, recorded at cover6solutions.com/verify.
How it works
You’re enrolled in both as soon as your payment completes. The challenge’s 72 hours start only when you press Start my 72 hours, so you take it when you’re ready.
Both are aligned with DoD 8140 work role 531 (Cyber Defense Incident Responder). We make no job, interview or exam-pass promises.
What comes next
Add the bundle to your cart and check out.