CYBR 320 Incident Response & Digital Forensics
This course teaches the fundamentals of incident response and digital forensics. A systematic approach to incident response will be reviewed, focusing on the six-step process (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned). Preservation of data, recovery and forensic analysis will also be emphasized. The legal aspects of both investigation and preservation will be discussed along with learning the fundamentals of preparing an acceptable forensic report.