This module focuses on the concept and importance of incident response. You'll learn about the key preparatory steps for incident response and the importance of thorough documentation throughout the incident response process. You will delve into detection and analysis techniques used to identify and understand security incidents, followed by containment, eradication, and recovery strategies to prevent further damage and restore systems. The module also highlights the tools and automation technologies that enhance response efforts and covers post-incident activities. By the end of this module, you will be well-equipped to manage and mitigate security incidents effectively.

Skills you'll gain

This course includes:

This module explores the essential aspects of digital forensics and investigation. It provides an overview of digital forensics and highlights its importance in investigating cyber incidents. You'll learn the data collection and examination methods, including using Cowrie for log investigation. The module covers key topics about handling digital evidence to ensure integrity, analyzing and reporting findings, and understanding forensic data files. The module introduces various digital forensics tools and includes practical activities to apply knowledge in simulated investigations. Additionally, it covers the factors influencing data recovery. By the end of this module, you will be able to conduct thorough digital forensic investigations.

Skills you'll gain

This course includes:

This module provides a conclusion to the course and includes a final project that allows students to apply the knowledge gained throughout the course on incident response and digital forensics. It includes a peer review component where students evaluate each other's work, along with course wrap-up materials, congratulatory information, and acknowledgments to the team. The module also contains a glossary of terms related to incident response and digital forensics for reference.

Skills you'll gain

This course includes: