Incident Response Series Lab Class: Data Analysis (IR216)
The Cybersecurity and Infrastructure Security Agency (CISA) is proud to offer the Incident Response Training event, Incident Response Series Lab Class: Data Analysis.
This 4-hour skills development cyber range training provides best practices for strengthening cybersecurity event data analysis skills.
Through case studies, presentations by expert facilitators, demonstrations, and lab exercises, participants will explore the tools and techniques necessary to identify indicators of attack (IoA) and indicators of compromise (IoC), use IoC in an active investigation, identify the vulnerabilities and mitigation options associated with an attack, perform network traffic analysis, assess and prioritize threats, and identify options for containment.
Throughout the course participants will:
- Practice data analysis to identify IoA and IoC of an Advanced Persistent Threat (APT)
- Use automated tools for data analysis to determine attack techniques and identify weaknesses that were exploited, then, evaluate options to contain attacks and mitigate vulnerabilities
- Use automated tools to expand an investigation based on IoC discovered during analysis
This exercise is a step-by-step, facilitated experience that uses a keyboard approach to understand these topics in a realistic technical environment.
Approved registrants must attend a mandatory student technical check the day before the training to establish a connection to the course content and lab environment.
EVENT LOGISTICS
- Dates: Tuesday, September 17, 2024 , Wednesday, September 18, 2024 , or Thursday, September 19, 2024
- Time: 9:00 AM EDT – 1:00 PM EDT
- Location: Online via WebEx
- CPE Credit: Participants can earn 4 CPE credits for attending this course.
- Attendee Requirements: This course requires active participation. Attendees can use government-issued computers or personal computers. A second monitor is recommended.
- Note: Audio is through WebEx; there is no external dial-in.
- Closed captioning (English only) will be available during this training event. Previously recorded webinars are available on the CISA YouTube Channel for playback in other languages, if required.
Due to participation requirements, please register no later than 48 hours before the course starts. Cyber Insights will not accept registrations made less than 48 hours before the course start.