Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
SecureNinja's Certified Incident Handler (ECIH) training is designed to equip cybersecurity professionals with the skills to detect, respond to, and recover from cybersecurity incidents. The course follows a structured incident handling and response process covering a wide range of incidents including malware, email threats, network attacks, insider threats, and data breaches. Students gain hands-on experience with incident response tools, forensic techniques, and mitigation strategies. Ideal for SOC analysts, incident responders, and information security personnel, this course bridges the gap between planning and operational response. Training is available in person in our Alexandria, VA classrooms as well as Live Online. Private onsite training is available for groups of 5 or more.
This course prepares students for the EC-Council Certified Incident Handler (ECIH) exam. Students will learn to establish an incident response policy, perform digital forensics, analyze attack vectors, handle malware outbreaks, and recover systems while preserving evidence.
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.