Certified Cyber Incident Response Manager: Course Workbook and Lab Exercises

PLEASE READ:
This workbook is one of 4 publications used for the Certified Cyber Incident Response Manager course and is only meant to serve as a supplemental study aid for the Exam Prep Guide listed below. It is strongly recommended that the Course Workbook only be purchased with the Exam Prep Guide.

C)CIRM EXAM PREP GUIDE:
https://www.amazon.com/dp/1734064048

COURSE INFORMATION:
https://phase2advantage.com/ccirm

COURSE DESCRIPTION
As organizations continue to rely on expanding infrastructure in an increasingly hostile threat landscape, the escalation of incidents involving malicious actors poses critical risks to information systems and networks. The ability to identify threats, respond to incidents, restore systems, and enhance security postures is vital to the survival of the operation.

The Certified Cyber Incident Response Manager certification course brings Incident Response core competencies to advanced levels by presenting students with 16 detailed learning objectives. Students will be provided with the knowledge and the practical skills needed to investigate and respond to network and system incidents. With a specific focus on the identification and remediation of incidents involving host and network devices, students will cover topics such as Threat Intelligence Collection, Investigative Techniques, Creating Playbooks, and Malware Triage. Practical lab exercises utilize Wireshark, a packet capturing tool used in real-world investigations.

LEARNING OBJECTIVES:
Domain 01: Overview of The Incident Response Life Cycle
Domain 02: Understanding The Threat Landscape
Domain 03: Building an Effective Incident Response Capability
Domain 04: Preparing for Incident Response Investigations
Domain 05: Vulnerability Assessment and Management
Domain 06: Identifying Network and System Baselines
Domain 07: Indicators of Compromise and Threat Identification
Domain 08: Investigative Principles and Lead Development
Domain 09: Threat Intelligence Collection and Analysis
Domain 10: Overview of Data Forensics and Analysis
Domain 11: Host-Based Data Collection Practices
Domain 12: Network-Based Data Collection Practices
Domain 13: Static and Dynamic Malware Triage
Domain 14: Incident Containment and Remediation
Domain 15: Incident Reporting and Lessons Learned
Domain 16: Creating Playbooks and Response Scenarios