Incident Response: Lead the Investigation From Alert to Recovery

Take a real intrusion from the first alert to full recovery. You'll triage, scope, contain and eradicate it hands-on, then write the report leadership reads.

What you’ll do

• Triage alerts and decide what is a real incident
• Scope and contain an active intrusion in a hands-on lab
• Eradicate, recover and confirm the attacker is gone
• Write the incident report and lessons learned

Part of the SOC Analyst track, aligned with DoD 8140 work role 531 Cyber Defense Incident Responder.

Course facts

• Level: SOC Analyst, Level III
• Structure: 13 topics, 49 lessons and 15 hands-on labs, a graded capstone and a final assessment
• Lab: a hands-on Splunk lab with the intrusion to investigate
• Certificate: SOC Analyst Level III certificate with 22.5 CPE hours, verifiable at cover6solutions.com/verify
• Who it’s for: SOC analysts ready to lead an investigation, not just triage alerts
• Before you start: SOC Analyst Prep Labs, or equivalent SOC experience

Taught by practitioners who do this work every day.

Enrollment

• You’re enrolled the moment your order completes.

Questions? Email info@cover6solutions.com.