Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Cybersecurity Attack Incident and Artifact Gathering
The development of the skills needed to conduct incident response investigations. The objective is to apply a dynamic incident response process to evolving cyber threats and develop threat intelligence to mount effective defense strategies. Ways that attackers scan, exploit, pivot, and establish persistence in the cloud and conventional systems are evaluated. Emphasis is on understanding how to respond to incidents at a high level and building important technical skills through hands-on labs and projects. Topics include what happens at each phase of incident response, as well as memory, networks, host analysis, and forensics. Students may receive credit for only one of the following courses: CST 640 or CTCH 660.
Provider Information
3501 University Blvd E
Adelphi, MD 20783
Course Overview
None
Learning Objectives
Learners will master the following Cybersecurity Skills upon completion of the course.
Apply the principles of cyberattack incident and artifact gathering
Articulate the rules, laws, policies, and procedures that affect digital forensics
Determine the appropriate digital forensic tools to conduct forensic analysis
Plan for incident responses for any breaches, intrusions, or theft
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.