0%
Preparation
Understand the Preparation phase of the Incident Response lifecycle.
0%
Detection and Analysis
Understand the Detection and Analysis phase of the Incident Response Lifecycle.
0%
Response and Recovery
Understand the Containment, Eradication, and Recovery phase of the Incident Response Lifecycle.
0%
Post-Incident Activity
Understand Post-Incident Activity, the last phase of the Incident Response Lifecycle.
Topic Rewind Recap
Lock in what you learned with a recap. Earn points and keep your streak.
Learn how to respond to a security incident from preparation through post-incident activity by investigating a real attack chain.
Incident response is not just a process on paper. In this module, you will work through a complete security incident at a company from start to finish, following the NIST incident response lifecycle across four rooms. Each room covers one phase of the lifecycle, building on the last, with every finding carrying forward into the next. By the end, you will have worked a real incident end to end the same way an IR analyst would on the job.
What are modules?
A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).


