Maxtrain.com - [email protected] - 513-322-8888 - 866-595-6863
The Certified Incident Handling Engineer course is designed to help incident handlers, system administrators, and general security engineers understand how to plan, create, and utilize their systems in order to prevent, detect, and respond to security breaches. Every business connected to the internet is getting probed by hackers trying to gain access. The ideal situation I to prevent this from happening, but realistically every business needs to know how to detect and resolve security breaches. Certified Incident Handlers are prepared to do handle these situations effectively.
In this 5 day instructor-led course students will learn common attack techniques, vectors, and tools used by hackers, so that they can effectively prevent, detect, and respond against them. This course is ideal for those who lead incident handling teams or are part of an incident handling team.
Furthermore, students will enjoy numerous hands-on laboratory exercises that focus on topics, such as reconnaissance, vulnerability assessments using Nessus, network sniffing, web application manipulation, malware and using Netcat plus several additional scenarios for both Windows and Linux systems. The 20 hours of experience in our labs is what will put you ahead of the competition and set you apart as a leader in incident handling.
Upon Completion
Students will:
With 13 modules and 14 Labs, the C)IHE will prepare you to handle the toughest incidents of security breaches because you will have knowledge and experience under your belt.
Exam Information
The Certified Incident Handling Engineer exam is taken online through Mile2`s Assessment and Certification System (MACS), which is accessible on your mile2.com account. The exam will take 2 hours and consist of 100 multiple choice questions. The cost is $300 USD and must be purchased from the store on Mile2.com.
The GIAC Certified Incident Handler exam is another certification for incident handling professionals that this course has more than prepared you to pass. We strongly recommend the more advanced C)IHE exam by Mile2. Please consult your instructor if you have any further questions. The exam is available for purchase through giac.org
12: Virtual Machine Security
Labs:
1: Netcat (Basics of Backdoor Tools)
Currently not disclosed
2: Exploiting and Pivoting our Attack
3: Creating a Trojan
4: Capture FTP Traffic
5: ARP Cache Poisoning Basics
6: ARP Cache Poisoning - RDP
7: Input Manipulation
8: Shoveling a Shell
9: Virus Total
10: Create Malware using SET
11: The Trojans
12: Examine System Active Processes and Running Services
13: Examine Startup Folders
14: The Local Registry
15: The IOC Finder – Collect
16: IOC Finder – Generate Report
17: Malware Removal
The C)IHE course is an incident handling course that teaches students how to plan for, detect, and respond to security breaches. In order to do this effectively we require students to understand the material in our C)ISSO: Information Systems Security Officer course. If you have taken the course or have equivalent experience/knowledge, you'll be able to learn the art of incident handling in the C)IHE course.
After you complete the C)IHE we encourage you to learn about disaster recovery and business continuity through our C)DRE: Disaster Recovery Engineer Course.
5 Days Course