Programa del Curso

Introduction to Incident Handling

  • Understanding cybersecurity incidents
  • Goals and benefits of incident handling
  • Incident response standards and frameworks (NIST, ISO, etc.)

Incident Response Process

  • Preparation and planning
  • Detection and analysis
  • Classification and prioritization

Containment Strategies

  • Short-term vs long-term containment
  • Network segmentation and isolation techniques
  • Coordination with stakeholders and notification protocols

Eradication and Recovery

  • Identifying root causes
  • System restoration and patching
  • Monitoring post-recovery

Documentation and Reporting

  • Incident documentation best practices
  • Generating actionable post-mortem reports
  • Lessons learned and metrics for improvement

Incident Response Tools and Technologies

  • SIEM systems and log analysis tools
  • Endpoint detection and response (EDR)
  • Automation and orchestration in IR

Tabletop Exercises and Simulations

  • Interactive incident scenarios
  • Team coordination drills
  • Evaluating response effectiveness

Summary and Next Steps

Requerimientos

  • Comprensión básica de los conceptos de seguridad informática
  • Familiaridad con protocolos de red y administración del sistema
  • Conocimiento de amenazas y vulnerabilidades en ciberseguridad

Público objetivo

  • Analistas de seguridad informática
  • Miembros del equipo de respuesta a incidentes
  • Profesionales de operaciones de ciberseguridad
 21 Horas

Número de participantes


Precio por Participante​

Testimonios (4)

Próximos cursos

Categorías Relacionadas