This program simulates real world cyber security incidents, is designed to teach the fundamental investigative techniques needed to respond to today’s cyber threats. It's built upon a series of hands-on labs that highlight the phases of a targeted attack, sources of evidence and principles of analysis such as evidence gathering, preparing an advisory report and escalation process.

Apply lessons learnt to proactively investigate an entire environment with “Processing of the incident related data sources and Indicator of Compromise (IoC) extracting (including metadata, registry, event logs, services, persistence mechanisms and artifacts of execution).