Learn how to respond to a security incident from preparation through post-incident activity by investigating a real attack chain.

Incident response is not just a process on paper. In this module, you will work through a complete security incident at a company from start to finish, following the NIST incident response lifecycle across four rooms. Each room covers one phase of the lifecycle, building on the last, with every finding carrying forward into the next. By the end, you will have worked a real incident end to end the same way an IR analyst would on the job.

Preparation

Understand the Preparation phase of the Incident Response lifecycle.

Detection and Analysis

Understand the Detection and Analysis phase of the Incident Response Lifecycle.

Response and Recovery

Understand the Containment, Eradication, and Recovery phase of the Incident Response Lifecycle.

Post-Incident Activity

Understand Post-Incident Activity, the last phase of the Incident Response Lifecycle.

Lock in what you learned with a recap. Earn points and keep your streak.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.

Incident Response Lifecycle

Preparation

Detection and Analysis

Response and Recovery

Post-Incident Activity

Topic Rewind Recap